1. Member States shall ensure that the processing of personal data in the context of this Regulation is carried out solely for the purpose of verifying compliance with this Regulation and with Regulation (EC) No 561/2006, in accordance with Directives 95/46/EC and 2002/58/EC and under the supervision of the supervisory authority of the Member State referred to in Article 28 of Directive 95/46/EC.
2. Member States shall, in particular, ensure that personal data are protected against uses other than those strictly linked to this Regulation and Regulation (EC) No 561/2006, in accordance with paragraph 1, in relation to:
— | the use of a global navigation satellite system (GNSS) for the recording of location data as referred to in Article 8, |
— | the use of remote communication for control purposes as referred to in Article 9, |
— | the use of tachographs with an interface as referred to in Article 10, |
— | the electronic exchange of information on driver cards as referred to in Article 31, and in particular any cross-border exchanges of such data with third countries, |
— | the keeping of records by transport undertakings as referred to in Article 33. |
3. Digital tachographs shall be designed in such a way as to ensure privacy. Only data necessary for the purposes of this Regulation shall be processed.
4. Owners of vehicles, transport undertakings and any other entity concerned shall comply, where applicable, with the relevant provisions on the protection of personal data.