(1)

It is for the Management Board, acting on a proposal from the Director and after consulting the Joint Supervisory Body, to determine the conditions relating to the processing of data for the purpose of determining whether such data are relevant to Europol’s tasks and can be included in one of its information processing systems, in particular with respect to access to and the use of the data, as well as time limits for the storage and deletion of the data.

(2)

The Management Board, by adopting this Decision, shall take account of the principles of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data of 28 January 1981 and of Recommendation No R(87)15 of the Committee of Ministers of the Council of Europe of 17 September 1987 regulating the use of personal data in the police sector.

(3)

The Management Board Decision shall be submitted to the Council for approval,

(a)

‘personal data’ means any information relating to an identified or identifiable natural person: an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;

(b)

‘processing of personal data’ means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;

(c)

‘information processing systems’ means the Europol Information System, the analysis work files and other systems processing personal data, as referred to in Article 10(1) of the Europol Decision;

(d)

‘Europol Information System’ means the system referred to in Article 11(1) of the Europol Decision;

(e)

‘analysis work file’ means a file opened for the purpose of analysis, as referred to in Article 14 of the Europol Decision;

(f)

‘EU bodies’ means institutions, bodies, offices and agencies set up by, or on the basis of, the Treaty on European Union and the Treaties establishing the European Communities, as referred to in Article 22(1) of the Europol Decision;

(g)

‘third parties’ means third States and organisations as referred to in Article 23(1) of the Europol Decision;

(h)

‘duly authorised Europol staff’ means Europol staff designated by the Director to process personal data in accordance with this Decision.

(a)

personal data entered into the Europol Information System pursuant to Article 13(1) of the Europol Decision;

(b)

personal data offered by a Member State, an EU body or a third party for inclusion in a specific analysis work file as well as personal data entered into an analysis work file pursuant to Article 14 of the Europol Decision;

(c)

personal data provided to Europol for inclusion in another specific system processing personal data as referred to in Article 10(1) last sentence of the Europol Decision.