(4)The SRB, here represented by the SRB Ethics and Compliance Officer, respectively the SRB Data Protection Officer, processes several categories of personal data, and particularly identification data, contact data, professional data and acts as data controller. The personal data are stored in a secured electronic environment which prevents unlawful access or transfer of data to persons who do not have a need to know. The personal data processed are retained in accordance with the SRB rules on retention of documents. At the end of the retention period, the case related information including personal data is transferred to the historical archives or deleted in accordance with the principle of data minimisation and data accuracy.