Article 3 Information on the certificates of qualifications and service record books

The Commission shall set up the Union database. It shall manage it in accordance with the requirements laid down in Annex I. It shall be responsible for its technical operations and its maintenance. The Commission shall take all measures necessary to ensure the confidentiality, integrity and availability of the Union database.

Member States that issue certificates in accordance with Directive (EU) 2017/2397 shall make available machine-to-machine to the Union database the registers referred to in Article 25(1) of Directive (EU) 2017/2397 concerning the data referred to in Article 25(1) of Directive (EU) 2017/2397.

Without prejudice to paragraph 4 each of the Member States’ competent authority designated as controller for the data processed in the national registers and the Commission shall be joint controllers for the processing of personal data in the Union database. Responsibilities shall be allocated among joint controllers in accordance with Annex III.

The Commission shall be regarded as controller for the processing of personal data necessary to grant and manage access rights to the Union database.