Partijen en gegevens

The Data Inspection Board

Box 12050

S-102 22 STOCKHOLM

has been declared the competent authority in accordance with Article 13, paragraph 2, subparagraph a. of the Convention.

The Government of the French Republic declares that in Article 9, paragraph 2(a) it interprets the phrase ‘Sécurité d'Etat’ as meaning ‘Sûreté de l'Etat’ and the phrase ‘Sûreté publique’ as meaning ‘Sécurité publique’.

The Government of the French Republic wishes to make the following complementary declaration:

In accordance with the provisions of Article 3, paragraph 2, sub-paragraph c, it will also apply the present Convention to personal data files which are not processed automatically.

Competent Authority:

National Commission for Computerization and Freedom

21, rue Saint-Guillaume

75007 PARIS

Tél: (1) 45 44 40 65

Fax: (1) 45 49 04 55

Article 3, paragraph 2 a:

‘The Convention shall not apply to private personal registers which are not utilized in the private sector or by societies or foundations.’

Article 3, paragraph 2 b:

‘The rules of the Convention shall also be applied to information on associations or foundations.’

Article 24, paragraph 1:

‘The Convention will not be made applicable to Svalbard.’

Article 13, paragraph 2 a:

‘The institution in Norway designated in pursuance of Article 13, paragraph 2a of the Convention shall be Datatilsynet (The Data Inspectorate), Postboks 8177 Dep., OSLO 1.’

Article 8, paragraph b:

‘The Federal Republic of Germany starts from the assumption that a request for information pursuant to Article 8, paragraph b, cannot be complied with if the data subject is unable adequately to specify his request.’

Article 12, paragraph 2:

‘The Federal Republic of Germany, with reference to paragraph 67, sub-paragraph 5, of the Explanatory Report to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, starts from the assumption that Article 12, paragraph 2, leaves a Party at liberty to lay down, in its domestic data protection law, provisions which do not permit, in particular cases, the transfer of personal data, in consideration of the interests of the data subject that warrant protection.’

Article 13, paragraph 2, subparagraph a:

‘The Competent authority, for the sphere of competence of the Federal Government, is:

Der Bundesminister des Innern

Postfach 17 02 90

D — 5300 Bonn 1.

The authorities for the spheres of competence of the Länder will be designated as soon as possible.’

Article 24, paragraph 1:

‘The Convention shall also apply to Land Berlin, with effect from the date on which it enters into force for the Federal Republic of Germany.’

Op 07-09-1987 heeft de Bondsrepubliek Duitsland de volgende lijst van bevoegde autoriteiten bedoeld in artikel 13, tweede lid, letter a, medegedeeld:

The competent authority, for the sphere of competence of the Federal Government, is:

Bundesministerium des Innern

Graurheindorfer Strasse 198

53117 Bonn

The competent authorities, for the spheres of competence of the Länder, are:

The Grand Duchy of Luxembourg declares that it avails itself of the right, within the limits of Article 3(2)a) of the Convention, not to apply the Convention:

The Grand Duchy of Luxembourg designates as the competent authority for the granting of assistance for the implementation of the Convention: the Consultative Committee established by the law of 31 March 1979 regulating the use of personal data in automated processing:

c/o Ministry of Justice

13 Rue Erasme

Centre Administratif Pierre Werner

L - 1468 Luxembourg

Article 2(c)

The Republic of Austria takes the assumption that the term ‘dissemination’ covers the terms ‘communication’ and ‘making available’ used in section 3 paragraphs 9 and 10 of the amendment to the Austrian Data Protection Act, Federal Law Gazette No. 370/1986.

Article 5(e)

The Republic of Austria takes the assumption that this requirement is fully met by the stipulation of the Austrian Data Protection Act concerning the deletion of data upon application by the data subject.

Article 9(2)

The Republic of Austria takes the assumption that the contents of the phrase ‘provided for by the law of the Party’ contained in the introductory sentence of Article 9(2) of the Convention conforms to the contents of the phrase ‘in accordance with the law’ contained in Article 8(2) of the European Convention on Human Rights, and that it is therefore in agreement with the Convention if under the Austrian basic right to data protection it is admissible to restrict such basic right only if provided for by the law.

Furthermore, the Republic of Austria takes the assumption that, in its scope, the restriction in the interest of the ‘monetary interests of the State’ as provided for in Article 9(2)a of the Convention in conjunction with the restriction under paragraph 2(b) corresponds to the restriction in the interest of the ‘economic well-being of the country’ contained in Article 8(2) of the European Convention on Human Rights.

Article 24, paragraph 1

The Convention shall not apply to the Faroe Islands and Greenland.

Article 13, paragraph 2a):

The Danish authority designated shall be:

Data Surveillance Authority (D.S.A.)

(Registertilsynet)

Christians Brygge 28, 4

DK-1559 COPENHAGEN V

Tel: 31 14 38 44.

The Government of Ireland wish to make a declaration in accordance with Article 3(2)(a) of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data to the effect that the Convention will not apply to the following categories of automated personal data files, which are set out at Section 1(4) of the Data Protection Act 1988, to wit:

Declaration regarding application of the Convention to personal data files which are not processed automatically (Article 3.2 (c)):

Ireland will apply the Convention to personal data which are not processed automatically but which are held in a relevant filing system. ’Relevant filing system' means any set of information relating to individuals to the extent that, although the information is not processed by means of equipment operating automatically in response to instructions given for that purpose, the set is structured, either by reference to individuals or by reference to criteria relating to individuals, in such a way that specific information relating to a particular individual is readily accessible.

Declaration under Article 13 (2) of the Convention:

In accordance with Article 13(2) of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, Ireland provides up-dated information in relation to the designated authority, in respect of Ireland, as follows:

Data Protection Commissioner

Canal House

Station Road

Portarlington

Co. Laois

Ireland.

In accordance with Article 13(2)(a) of the Convention for the Protection of individuals with regard to Automatic Processing of Personal Data, I have the honour to inform you that the designated authority, in respect of Ireland, is:

Mr Dónal Linehan

Data Protectioin[lees: Protection] Commissioner

Earl Court

Adelaine Road

Dublin 2

Ireland

Data Protection Ombudsman

Kauppakartanonkatu 7 A 41

P.O. Box 31

00931 HELSINKI

FINLAND

In accordance with Article 3, paragraph 2 a of the Convention, Belgium will not apply the Convention to the processing of personal data managed by individuals which by its nature is intended for private, family or household use and retains this purpose.

In accordance with Article 3, paragraph 2 a of the Convention, Belgium will not apply the Convention to processing that applies exclusively to personal data made public by virtue of a statute or regulation.

In accordance with Article 3, paragraph 2 a of the Convention, Belgium will not apply the Convention to processing that applies exclusively to personal data, which the person to whom it relates makes public or has made public, provided the processing is in keeping with the purpose thereof.

In accordance with Article 3, paragraph 2 c of the Convention, Belgium will also apply this Convention to personal data files that are not processed automatically.

The designated authority for furnishing the information covered by Article 13, paragraph 3 a, is the

Ministry of Justice

Department of Civil and Criminal Affairs

Place Poelaert 3

1000 BRUXELLES

The competent authority for furnishing the information contained in Article 13, paragraph 3 b is the

Commission for the Protection of Privacy

Place Poelaert 3

1000 BRUXELLES

The designated authority for the purposes of Article 14 is the

Commission for the Protection of Privacy

Place Poelaert 3

1000 BRUXELLES

In accordance with article 24, first paragraph, the Convention shall apply to the Kingdom in Europe.

Pursuant to article 3, second paragraph, under a, of the Convention, the Kingdom of the Netherlands (for the Kingdom in Europe) declares that:

In accordance with article 13, second paragraph, under a, of the Convention the authority designated by the Kingdom of the Netherlands (for the Kingdom in Europe) is:

Registratiekamer

Postbus 3011

NL-2280 GA RIJSWIJK

The Netherlands

Tel.: 19-31-70-3190190

Fax: 19-31-70-3940460

The Kingdom of the Netherlands currently consists of three parts : the Netherlands, the Netherlands Antilles and Aruba. The Netherlands Antilles consists of the islands of Curaçao, Sint Maarten, Bonaire, Sint Eustatius and Saba.

With effect from 10 October 2010, the Netherlands Antilles will cease to exist as a part of the Kingdom of the Netherlands. From that date onwards, the Kingdom will consist of four parts: the Netherlands, Aruba, Curaçao and Sint Maarten. Curaçao and Sint Maarten will enjoy internal self-government within the Kingdom, as Aruba and, up to 10 October 2010, the Netherlands Antilles do.

These changes constitute a modification of the internal constitutional relations within the Kingdom of the Netherlands. The Kingdom of the Netherlands will accordingly remain the subject of international law with which agreements are concluded. The modification of the structure of the Kingdom will therefore not affect the validity of the international agreements ratified by the Kingdom for the Netherlands Antilles: these agreements, including any reservations made, will continue to apply to Curaçao and Sint Maarten.

The other islands that have until now formed part of the Netherlands Antilles - Bonaire, Sint Eustatius and Saba - will become parts of the Netherlands, thus constituting ‘the Caribbean part of the Netherlands’. The agreements that now apply to the Netherlands Antilles will also continue to apply to these islands; however, the Government of the Netherlands will now be responsible for implementing these agreements.

In addition, a number of the agreements that currently apply to the Netherlands are hereby declared applicable, from 10 October 2010, to this Caribbean part of the Netherlands.

In accordance with Article 3, paragraph 2, sub-paragraph (a) of the Convention, I declare that the Convention will not be applied to personal data files held only for distributing or supplying or recording the distribution or supply of articles, information or services to the data subjects.

In accordance with Article 13, paragraph 2, sub-paragraph (a) I would like to designate the Isle of Man Data Protection Register, Willow House, Main Road, Onchan, Isle of Man as the competent authority to render assistance in the Isle of Man in order to implement this Convention.

In accordance with Article 24, paragraph 2, of the Convention, the Government of the United Kingdom of Great Britain and Northern Ireland declares that the United Kingdom's ratification to the Convention shall be extended to the territory of Gibraltar, for whose international relations the United Kingdom is responsible.

For the purposes of Article 13, paragraph 2a, of the Convention, the Government of the United Kingdom of Great Britain and Northern Ireland declares that the competent authority for the Government of Gibraltar shall be:

The Gibraltar Regulatory Authority

With regard to the communication that the United Kingdom addressed to the Secretariat General of the Council of Europe on 29 July 2019, concerning the intention of the United Kingdom to extend to Gibraltar the application of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108), and notification of which was received by letter from the Secretary General dated 12 July 2019, Spain, recalling that it is a Party to the said Convention, as well as to the Additional Protocol (ETS No. 181) and to Protocol of amendment (CETS No. 223) thereof, wishes to recall the content of its Declaration of 5 March 2008 and to make the following statement:

Italy declares, with regard to Article 3, paragraph 2, sub-paragraph a, of the Convention, that it will not apply the Convention to the processing of personal data from individuals, provided that these datas are not intended for systematic communication or for broadcast.

Italy declares, with regard to Article 3, paragraph 2, sub-paragraph b, of the Convention, that it will also apply the Convention to the processing of personal data concerning legal persons, groups, foundations, associations.

Italy declares, with regard to Article 3, paragraph 2, sub-paragraph c, of the Convention, that it will also apply the Convention to data classified without the aid of electronic or automatic processing.

Italy declares that the authority designated for the purposes of co-operation and mutual assistance between Parties provided for by Chapter IV of the Convention is the ‘Garante per la tutela delle persone e di altri soggetti rispetto al trattamento dei dati personali’, whose provisional seat is at the Chamber of Deputies, Palais Montecitorio, I-00100 ROME.

I hereby attest that the Government of the Republic of Hungary has appointed Dr. Paulina Oros, as representative to the Consultative Committee, and Dr. András Beros as deputy representative, in accordance with Article 18, of the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data, signed in Strasbourg, on 28 January 1981.

In accordance with Article 3, paragraph 2, of the Convention:

The Convention will also apply to personal data concerning legal persons and to personal data files which are not processed automatically.

The Convention will not apply:

The Federal Data Protection Commissioner is the competent authority to render assistance in the implementation of the Convention.

The Government of the Republic of Hungary hereby declares that in accordance with Article 3, paragraph 2, subparagrah[lees: subparagraph]c, of the Convention, it will also apply the Convention to data classified without the aid of electronic or automatic processing.

In accordance with Article 13. 2. a., the designated authority is:

Ministry of Justice of the Republic of Slovenia

Mr Jože Šantovec

Counsellor to the Government

(Chief of the Data Protection Sector)

Zupančičeva 3

61000 LJUBLJANA

Tel: 386 61 1765 211

Fax: 386 61 210 200.

In conformity with Article 13, paragraph 2, subparagraph a, of the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data, done at Strasbourg, on 28 January 1981, the Ministry of Justice of the Republic of Hungary has been designated by the Government of the Republic of Hungary as the competent authority to render assistance to the Parties, in order to implement the convention.

The address of the Ministry of Justice of the Republic of Hungary is as follows:

Igazságügyi Minisztérium

H-1363 Budapest

Szalay u. 16.

The United Kingdom will apply the Convention to personal data which are not processed automatically but which are held in a relevant filing system. ‘Relevant filing system’ means any set of information relating to individuals to the extent that, although the information is not processed by means of equipment operating automatically in response to instructions given for that purpose, the set is structured, either by reference to individuals or by reference to criteria relating to individuals, in such a way that specific information relating to a particular individual is readily accessible

[Date of entry into force of the declaration: 27/4/2001]

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, the Republic of Latvia declares that it will not apply the above-said Convention to the following categories of automated personal data files:

In accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Latvia declares that it will apply the Convention to those personal data files which are subject to the law On Official Secrets considering the exceptions listed in this law.

This declaration replaces the previous declaration made by the Republic of Latvia at the time of ratification of the Convention, on 30 May 2001.

In accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Latvia declares that:

— it will apply the Convention to those personal data files which are subject to the law on Official Secrets considering the exceptions listed in this law, i.e., information which may not be an Official Secret. According to Article 5 of the Law on Official Secrets, it is prohibited to grant the status of an official secret and to restrict access to the following information:

It will not apply the Convention to the personaldata files which are processed by public institutions for the purposes of national security and criminal law.

This declaration replaces the previous declaration made by the Republic of Latvia on 28 November 2005, registered by the Secretariat General on 8 December 2005.

In accordance with Article 13 of the Convention, the Czech Republic declares that the designated authority is:

Office for Personal Data Protection

Havelkova 22

130 00 Praha 3

In accordance with Article 3, paragraph 2, subparagraph a, of the Convention, the Republic of Estonia declares that it will not apply this Convention to the processing of personal data collected by natural persons for private purposes.

The authority designated by the Republic of Lithuania in pursuance of Article 13, paragraph 2a of the Convention is:

State Data Protection Inspectorate

Gedimino pr. 27/2

LT- 2600 Vilnius

LITHUANIA.

In accordance with Article 13, paragraph 2, of the Convention, the Republic of Cyprus declares that the designated authority is the Commissioner for Personal Data Protection whose address (provisional) is:

Law Office of the Republic of Cyprus

1403 Nicosia

Cyprus

Tel.: 00 357 2 889131

Fax: 00 357 2 667498

E-mail: roc-law@cytanet.co.cy

Persónuvernd (The Data Processing Authority)

Rauðarárstíg 10

105 Reykjavík

Iceland

Tel.: (00354)510.9600

Fax: (00354)510.9606

In accordance with Article 13, paragraph 2, sub-paragraph a, of the Convention, the Republic of Latvia declares that the designated authority of the Republic of Latvia is:

Data State Inspection

Kr. Barona Street 5-4

Riga, LV-1050

Latvia

Fax: (+371) 722.3556

Phone: (+371) 722.3131.

(Article 13, paragraph 2)

Data State Inspectorate

Kr. Barona Str. 5-4

Riga, LV-1050 Latvia

Tel: +371.67223131

Fax: +371.67223556

E-mail: info@dvi.gov.lv

Website: http://www.dvi.gov.lv

Malta declares that, in accordance with Article 3 (2)(a) of the Convention, the said Convention will not apply to the following categories of automated personal data files, which are included in Article 5 of Malta's Data Protection Act No XXVI of 2001:

Malta understands that a request for information pursuant to paragraph (b) of Article 8 of the Convention cannot be complied with if the data subject is unable to adequately specify his or her request.

Malta declares that the autority designated for the purposes of co-operation and mutual assistance between Parties in terms of Article 13 (2)(a) of the Convention is the:

Office for the Commissioner for Data Protection

280 Republic Street

Valletta CMR 02

Malta

Tel. 00 (356) 21 221 630

Fax 00 (356) 21 221 629

The Czech Republic declares that, according to Article 3, sub-paragraph 2.c, of the Convention, it will also apply this Convention to personal data files which are not processed automatically.

[Date of entry into force of the declaration: 25/12/2003]

In accordance with Article 3, paragraph 2, of the Convention, the Principality of Liechtenstein declares that:

The Principality of Liechtenstein, by withdrawing item 2.d (‘personal data files set up pursuant to the Liechtenstein Due Diligence Act’), amends its declaration concerning Article 2 of the Convention as contained in the annex to the instrument of ratification deposited on 11 May 2004.

In accordance with Article 3, sub-paragraph 2.a, this Convention shall not apply to the processing of personal data which are included in a data base when:

In accordance with Article 3, sub-paragraph 2.c, the Convention shall also apply to the non-automatic processing of personal data which are part of a data base or which are to be included in such a data base.

In accordance with Article 13 of the Convention, the national competent authority is:

the Ombudsperson

3-5 lancu de Hunedoara Avenue

sector 1, Bucharest, postal code 71204

tel: 231 50 01/fax: 231 50 00

This Convention shall also apply to the automatic processing of personal data realized within the framework of the legitimate activities of any foundation, association or any other non-profit organization having political, philosophical, religious or trade-union character, under condition that the concerned person be a member of this organization or has constant relations with it regarding the specific activity of the organization and that the data shall not be disclosed to a third party without prior consent of the concerned person.

In accordance with Article 13, paragraph 2, subparagraph a of the Convention, the Republic of Estonia designates the Data Protection Inspectorate as the accredited authority.

In accordance with Article 13, paragraph 2, of the Convention, the State body providing State Supervision over the protection of personal data in the Slovak Republic is:

the Government Commissioner for the Protection of Personal Data in Information Systems and Inspection Unit for the Protection of Personal Data

Government Office of the Slovak Republic

Namestie slobody 1

SK-813 70 Bratislava 1

Slovak Republic

Article 13, paragraph 2, subparagraph (a)

‘…the competent authority to render assistance in order to implement this Convention is: Home office, 50 Queen Anne's Gate GB = LONDON SW1H9AT’

Article 24, paragraph 1:

‘…in addition to the United Kingdom of Great Britain and Northern Ireland the Convention shall also apply to the Bailiwick of Jersey and the Bailiwick of Guernsey.’

The Data Protection Registrar

Springfield House

Water Lane

Wilmslow

CHESHIRE SK9 5AX

FOR THE UNITED KINGDOM:

The Data Protection Registrar

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

FOR THE BAILIWICK OF GUERNSEY:

The Advisory and Finance Committee

Sir Charles Frossard House, PO Box 43, La Charroterie

St Peter Port, Guernsey, GY1 1FH

FOR THE BAILIWICK OF JERSEY:

States of Jersey Data Protection Registrar

States Greffe, Royal Square, St Helier, Jersey, JE1 1DD

FOR THE ISLE OF MAN

The Isle of Man Data Protection Registrar

Willow House, Main Road, Onchan, Isle of Man

The designated authority for the United Kingdom with effect from 20 January 2001 will be:

The information Commissioner

Wycliffe House

Water Lane

Wilmslow — Cheshire SK9 5AF

The designated authority for the Bailiwick of Guernsey is now:

The Data Protection Commissioner

Sir Charles Frossard House

PO Box 43

St Peter Port — Guernsey GY1 1 FH

The address of the designated authority for the Bailiwick of Jersey is now:

The Data Protection Registrar

The Data Protection Registry

Morier House

Halkett Place

St Helier — Jersey JE1 1DD

The address of the designated authority for the Isle of Man is now:

The Data Protection Registrar

Willow House

Main Road

Onchan

Isle of Man IM3 4PR

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, the Republic of Albania declares that it will not apply the Convention to the following categories of personal data:

In accordance with Article 3, paragraph 2, sub-paragraph b, of the Convention, the Republic of Albania declares that it will apply the Convention to the data (information) relating to groups of persons, associations, foundations, companies, institutions or any other bodies, consisting directly or indirectly of individuals whether or not such bodies possess legal personality.

In accordance with Article 13, paragraph 2, of the Convention, the Republic of Albania declares that the designated authorities for cooperation among the parties are:

Concerning the respective competences of the above-mentioned authorities:

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, the Republic of Croatia declares that the Convention will not apply to the automated personal data files kept by individuals exclusively for personal use or for household purposes.

In accordance with Article 3, paragraph 2, sub-paragraph c, of the Convention, the Republic of Croatia declares that the Convention will also apply to personal data files which are not processed automatically.

In accordance with Article 13, paragraph 2, sub-paragraph a, of the Convention, the Republic of Croatia declares that the competent authority is the Personal Data Protection Agency.

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, Serbia and Montenegro shall not apply the Convention to automated databases containing personal data being kept in accordance with criminal records and State security regulations.

The Republic of Serbia replaces its declaration of 6 September 2005 as contained in its instrument of ratification to the Convention by the following declaration:

Pursuant to Article 3, paragraph 2, sub-paragraph a, of the Convention, the Republic of Serbia shall not apply the Convention with regard to the automatic processing of:

Pursuant to Article 3, paragraph 2, sub-paragraph c, of the Convention, the Republic of Serbia declares that the Convention applies to the processing of personal data contained in the database that is not automated.

The Republic of Serbia replaces the declaration contained in the two lletters[lees: letters] from the Permanent Mission of Serbia and Montenegro that were delivered with the instrument of ratification on 6 September 2005, as subsequently updated by the letter of 20 July 2006 from the Permanent Mission of the Republic of Serbia, by the following declaration:

Pursuant to Article 13 of the Convention, the Republic of Serbia designates the following competent authority:

Commissioner for Access to Information of Public Importance and Protection of Personal Data

Ul. Svetozara Markovica 42

11000 Belgrade

Tel.: +381.11.3408900

Fax: +381.11.2685023

In accordance with Article 13 of the Convention, Serbia and Montenegro designates the following responsible authorities:

In accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Macedonia declares that it will not apply the Convention to the following categories of personal data:

In accordance with Article 13, paragraph 2.a, of the Convention, the function of the Macedonian information center is fulfilled by the:

Directorate for the Protection of Individuals' Data

‘Kej 13 Noemvri’

GTC 2, Section 2

1000 Skopje Rep. Macedonia

Contact person: Ms Marijana Marusic

Tel.: +389 2 3 230 635

Fax : +389 2 3 230 617

email: marijana.marusic@azis.gov.mk

In accordance with Article 13, paragraph 2.a, of the Convention, the function of the Macedonian information center is fulfilled by the:

Directorate for Personal Data Protection

‘Kej 13 Noemvri’

GTC, floor II, Section II

1000 Skopje Rep. Macedonia

Contact person: Ms Marijana Marusic

Tel.: +389 2 3 230 635

Fax: +389 2 3 230 617

email: marijana.marusic@dzip.gov.mk and

info@dzip.gov.mk

Following the adoption by the Parliament of the Republic of Macedonia of the Amendments to the Law of Protection of Personal Data, the last item of the declaration made to Article 3 of the Convention contained in the instrument of ratification of the Republic of Macedonia is no longer valid.

The Republic of Macedonia, therefore, withdraws only the last item of the declaration made to Article 3, paragraph 2.a, of the Convention, which reads as follows : ‘In accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Macedonia declares that it will not apply the Convention to the categories of personal data in conducting criminal proceeding.’

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, the Republic of Montenegro shall not apply the Convention to automated databases containing personal data being kept in accordance with criminal records and State security regulations.

In accordance with Article 13 of the Convention, Montenegro designates the following responsible authority:

Secretariat for development of the Republic of Montenegro

No. 46, Rimski trg

81000 Podgorica.

In relation to the Article 3, paragraph 2, of the Convention, Montenegro, after considering the declaration contained in the instrument of ratification, withdraws the same and declares:

In accordance with Article 3, paragraph 2, of the Convention, Montenegro will apply the Convention to automated databases containing personal data being kept in accordance with criminal records and State security regulations.

In accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Moldova will not apply the provisions of the Convention to:

In accordance with Article 3, paragraph 2.c, of the Convention, the Republic of Moldova will also apply the Convention to personal data files which are not processed automatically.

In accordance with Article 13, paragraph 1.a, of the Convention, the Republic of Moldova designates the National Center for the protection of personal data, created pursuant to Article 11 of the Law of the Republic of Moldova on the protection of personal data, as the competent authority for the implementation of the provisions of the Convention, and for the reports on co-operation with other Parties. The address of this authority will be communicated separately.

In accordance with Article 13, paragraph 1.a, of the Convention, the Republic of Moldova designates the National Center for the protection of personal data, created pursuant to Article 11 of the Law of the Republic of Moldova on the protection of personal data, as the competent authority for the implementation of the provisions of the Convention, and for the reports on co-operation with other Parties. The contact information are:

National Center for Protection of the Data with Personal Character

Str. Serghei Lazo nr. 48

MD-2004

CHISINAU

Republic of Moldova

Tel.: +373 22 820801

Fax: +373 22 802806

Director of the Centre: Vitalie PANIS

Deputy Director of the Centre: Vasile FOLTEA

In accordance with Article 13, paragraph 1.a, of the Convention, the Republic of Moldova designates the National Center for the protection of personal data, created pursuant to Article 11 of the Law of the Republic of Moldova on the protection of personal data, as the competent authority for the implementation of the provisions of the Convention, and for the reports on co-operation with other Parties. The contact information are:

National Center for Personal Data Protection

Str. Serghei Lazo nr. 48

MD-2004

CHISINAU

Republic of Moldova

Tel.: +373 22 820801

Fax: +373 22 820807

Email: centru@datepersonale.md

Director of the Centre: Vitalie PANIS

Deputy Director of the Centre: Vasile FOLTEA

In accordance with the Law of the Parliament of the Republic of Moldova No. 271 of 7 November 2013, and in accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Moldova will not apply the provisions of the Convention to:

Date of effect of the declaration: 3 April 2014

If the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data were to be extended by the United Kingdom to Gibraltar, the Kingdom of Spain would like to make the following declaration:

In accordance with Article 3, paragraph 2, subparagraph a, of the Convention, Andorra declares that it does not apply the Convention to the following personal data:

In accordance with Article 3, paragraph 2, subparagraph b, of the Convention, Andorra declares that it will apply the Convention to personal data files which are not processed automatically and which are subjected to provisions under Andorra's domestic law.

In accordance with Article 13, paragraph 2, of the Convention, Andorra designates as competent authority to render mutual assistance between the Parties:

Agència Andorrana de Protecció de Dades

(Agence andorrane pour la protection des données)

C/Prat de la Creu, 59-65

AD500 Andorra la Vella

Principat d'Andorra

Tel. (+376) 808115

In accordance with Article 13 of the Convention, Monaco designates as the authority responsible for providing, within the scope and limitations of the said Article, all information on Monaco's law and administrative practice regarding data protection:

Commission de Controle des Informations Nominatives - C. C.I.N.

‘Gildo Pastor Center’

7, rue du Gabian

MC 98000 Monaco

Tel.: 00.377.97.70.22.44

Fax: 00.377.97.70.22.45

E-mail: ccin@gouv.mc

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, the Republic of Azerbaijan declares that the provisions of the Convention will not be applied to the categories of personal data files, which are subject to State secret and processed by natural persons exclusively for personal and family needs in compliance with the rules defined by the legislation.

In accordance with Article 3, paragraph 2, sub-paragraph c, of the Convention, the Republic of Azerbaijan declares that the provisions of the Convention will be applied to personal data files which are not processed automatically.

In accordance with Article 13, paragraph 2, sub-paragraph a, of the Convention, the Ministry of Justice of the Republic of Azerbaijan is designated as a competent authority for furnishing information on the law and administrative practice in the field of data protection and for furnishing factual information.

The contact information are the following:

Ministry of Justice of the Republic of Azerbaijan

1, Inshaatchilar Avenue,

Baky city, AZ 1073

Republic of Azerbaijan.

Email: contact@justice.gov.az.

The Republic of Azerbaijan declares that it is unable to guarantee the implementation of the provisions of the Convention in its territories occupied by the Republic of Armenia until the liberation of those territories from the occupation and complete elimination of the consequences of that occupation.

The Republic of Azerbaijan declares that the rights and obligations set out in the provIsIons[lees: provisions] of the Convention shall not be applied by the Republic of Azerbaijan in respect of the Republic of Armenia.

With regard to the Declaration submitted by the Republic of Azerbaijan on 3 May 2010 upon depositing the instrument of ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, the Republic of Armenia hereby declares:

The Republic of Azerbaijan deliberately misrepresents the essence of the Nagorno-Karabakh issue, with respect to causes and effects of the conflict. The conflict arose due to the policy of ethnic cleansing of the Republic of Azerbaijan aimed at suppressing the free will of the Nagorno-Karabakh population, which has been followed by the massive military aggression against the self-determined Nagorno-Karabakh Republic. As a result, the Republic of Azerbaijan has occupied several territories of the Nagorno-Karabakh Republic.

In accordance with Article 3, paragraph 2, sub-paragraph a, of the Convention, Ukraine declares that it will apply the Convention to the personal data which are processed by natural persons exclusively for personal or everyday needs.

In accordance with Article 3, paragraph 2, sub-paragraph b, of the Convention, Ukraine declares that it will apply the Convention to the information pertaining to groups of persons, associations, funds, companies, corporations and any other organisations, which directly or indirectly consist of individuals irrespective of the fact, whether such offices have, or do not have, the status of legal entity.

In accordance with Article 3, paragraph 2, sub-paragraph c, of the Convention, Ukraine declares that it will apply the Convention to files of personal data, which are not processed automatically.

In accordance with Article 13, paragraph 2, of the Convention, Ukraine declares that the designated authority is the Ministry of Justice of Ukraine.

In accordance with Article 3, paragraph 2.a, of the Convention, Finland declares that it will not apply the Convention to the processing of personnal data by a private individual for purely personal purposes or for comparable ordinary and private purposes.

In accordance with Article 3, paragraph 2.c, of the Convention, Finland declares that, in addition to automatic processing of personal data, it will apply the Convention also to other processing of personal data where the data constitute or are intended to constitute a personal data file or part thereof.

In accordance with Article 13, paragraph 2, sub-paragraph a, of the Convention, Bosnia and Herzegovina declares that the Personal Data Protection Agency has been established by law in June 2006 as an independent administrative authority in Bosnia and Herzegovina and as a supervisory body for the protection of personal data in accordance with the Convention. The Agency is in charge of the application of the Convention in the whole territory of Bosnia and Herzegovina. The Director of the Agency is Mr Petar Kovacevic.

The Russian Federation ratifies the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data with the amendments approved by the Committee of Ministers of the Council of Europe on 15 June 1999, with the following declarations:

The Russian Federation declares that in accordance with subparagraph ‘a’ of paragraph 2 of Article 3 of the Convention, it will not apply the Convention to personal data:

The Russian Federation declares that in accordance with subparagraph ‘c’ of paragraph 2 of Article 3 of the Convention, it will apply the Convention to personal data which is not processed automatically, if the application of the Convention corresponds to the nature of the actions performed with the personal data without using automatic means.

The Russian Federation declares that in accordance with subparagraph ‘a’ of paragraph 2 of Article 9 of the Convention, it retains the right to limit the right of the data subject to access personal data on himself for the purposes of protecting State security and public order.

With regards to Article 13, paragraph 2, of the Convention, the Government of the Republic of San Marino declares that the designated authority for co-operation among Parties is: Professor Guido GUIDI, Administrative Appeal Judge of the Court of the Republic of San Marino. E-mail: guidguidi@libero.it

Turkey declares that its ratification of the Convention For The Protection of Individuals With Regard to Automatic Processing Of Personal Data neither amounts to any form of recognition of the Greek Cypriot Administration's pretention to represent the defunct ‘Republic of Cyprus’ as party to that Convention, nor should it imply any obligation on the part of Turkey to enter into any dealing with the so-called Republic of Cyprus within the framework of the said Convention.

In accordance with Article 3, paragraph 2.a, of the Convention, the Republic of Turkey declares that it does not apply the Convention to the following personal data:

In accordance with Article 3, paragraph 2, sub-paragraph c, of the Convention, the Republic of Turkey declares that the Convention will also apply to personal data files which are not processed automatically.

In accordance with Article 13, paragraph 2, sub-paragraph a, of the Convention, the Republic of Turkey declares that the competent authority is the Personal Data Protection Council.

The Republic of Cyprus has examined the declaration deposited by the Republic of Turkey upon ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108), registered at the Secretariat General of the Council of Europe on 2 May 2016.

The Republic of Turkey declares that its ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data neither amounts to any form of recognition of the Republic of Cyprus, as party to that Convention, nor should it imply any obligation on the part of the Republic of Turkey to enter into any dealing with the Republic of Cyprus within the framework of the said Convention. In the view of the Republic of Cyprus, the content and purported effect of this declaration makes it tantamount in its essence to a reservation contrary to the object and purpose of the Convention, which, it is to be noted, expressly provides that no reservations may be made in respect to its provisions. By such declaration, the Republic of Turkey purports to evade its obligations under the Convention vis-à-vis another equal and sovereign State Party, namely the Republic of Cyprus. Such declaration is incompatible with the principle that inter-State reciprocity has no place in the context of human rights treaties. Furthermore, it prevents the realization of cooperation between State Parties foreseen by the Convention.

The Republic of Cyprus therefore strongly rejects the aforesaid declaration made by the Republic of Turkey and considers such declaration to be null and void. The aforementioned objections by the Republic of Cyprus shall not preclude the entry into force of the Convention, in its entirety, between the Republic of Cyprus and the Republic of Turkey.

The Government of the Hellenic Republic has examined the declaration made by the Republic of Turkey upon ratification, on May 2nd 2016, of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

The Republic of Turkey inter alia declares that its ratification of the Convention should not imply any obligation on the part of Turkey to enter into any dealing with the Republic of Cyprus within the framework of the said Convention.

The Government of the Hellenic Republic is of the view that the above declaration in fact amounts to a reservation, as it purports to exclude the application of the Convention in its entirety between Turkey and the Republic of Cyprus, and would like to recall that according to Article 25 of the Convention, no reservation may be made in respect of the provisions of this Convention.

Furthermore, the Government of the Hellenic Republic notes that the above reservation made by the Republic of Turkey to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, which concerns the endowment of individuals with rights, is incompatible with the principle that inter-State reciprocity has no place in the context of human rights treaties. Such a reservation also prevents the realisation of inter-State cooperation under the Convention.

The Government of the Hellenic Republic, therefore, considers that the aforesaid reservation of Turkey is impermissible as prohibited by Article 25 of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data and as contrary to the object and purpose of this Convention.

For the above reasons, the Government of the Hellenic Republic objects to the declaration made by the Republic of Turkey upon ratification of the said Convention.

This objection shall not preclude the entry into force of the Convention between the Hellenic Republic and the Republic of Turkey.

The Government of the Portuguese Republic has examined the declaration made by the Republic of Turkey upon ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

The Portuguese Republic, as a European Union Member State, opposes the declaration made by the Republic of Turkey since it describes another Member State, the Republic of Cyprus, as a defunct entity.

The Government of Austria has examined the declaration made by the Republic of Turkey upon ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, adopted on 28 January 1981. It welcomes the ratification of the Convention by Turkey as a significant step for the promotion of data protection. However, as a member State of the European Union, Austria opposes the declaration made by the Republic of Turkey which describes another member State, the Republic of Cyprus, as a defunct entity.

As per Article 13.2, of the Convention, the authority designated for the purpose to render on behalf of the Republic of Mauritius, mutual assistance with another Party inter alia as per Article 13.3 to furnish information on its law and administrative practice in the field of data protection and to take, in conformity with its domestic law and for the sole purpose of protection of privacy, all appropriate measures for furnishing factual information relating to specific automatic processing carried out in its territory, with the exception however of the personal data being processed, is the:

Data Protection Office

5th Floor, Happy World House

Sir William Newton Street

Port Louis, Mauritius.

As per Article 14.2, of the Convention, the authority designated as the intermediary to address the request for assistance submitted by any person resident in the territory of another Party and to exercise the right conferred by the Mauritian domestic law, giving effect to the principles set out in Article 8 of the said Convention, is also the ‘Data Protection Office’.

As per Article 18 of the Convention, the Data Protection Commissioner from the ‘Data Protection Office’ will be the representative to the Consultative Committee. A high-ranking officer from the Ministry of Technology Communication and Innovation will act as the deputy Representative to the Committee. Both of them will participate to the functions mentioned under the Article 19.

In accordance with Article 13 of the Convention, Senegal designates as the competent authority:

La Commission de protection de données personnelles (CDP) of Senegal.

(Date of effect of the declaration: 01-12-2016)

In accordance with Article 13 of the Convention, Tunisia designates as the competent authority:

L’Instance Nationale de Protection des Données à caractère personnel (INPDP)

In accordance with Article 13 of the Convention, the Republic of Cabo Verde designates the following competent authority for co-operation among the Parties:

National Commission of Data Protection (CNDP)

The Mexican public authority responsible for the compliance with the right of access to public information, as well as the right to protection of personal data (pursuant Article 2.d of the Convention) is:

Authority: National Institute for Transparency, Access to Information and Personal Data Protection INAI - Mexico (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales)

The Republic of Argentina designates the Public Information Access Agency […] as the authority in order to implement the Convention, in conformity with its Article 13, paragraph 2.