... (e) déanfar iad a choinneáil i bhfoirm nach gceadaítear léi na hábhair sonraí a shainaithint ach go ceann tréimhse nach faide ná mar is gá chun na críocha sin ar chucu a dhéantar na sonraí pearsanta a phróiseáil a bhaint amach; féadfar sonraí pearsanta a stóráil le haghaidh tréimhsí níos faide a mhéid nach ndéanfar na sonraí sin a phróiseáil ach amháin chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh i gcomhréir le hAirteagal 89(1) faoi réir chur chun feidhme na mbeart iomchuí teicniúil agus eagraíochtúil a cheanglaítear leis an Rialachán seo d’fhonn cearta agus saoirsí an ábhair sonraí a choimirciú (“teorannú stórála”); ...
... (e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’); ...
... (i) is gá an phróiseáil a dhéanamh chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh i gcomhréir le hAirteagal 89(1) bunaithe ar dhlí an Aontais nó ar dhlí Ballstáit a bheidh ar comhréir leis an aidhm atá á saothrú, a urramóidh éirim an chirt maidir le cosaint sonraí agus a fhorálfaidh do bhearta oiriúnacha agus sonracha chun cearta bunúsacha agus leasanna an duine is ábhar don na sonraí a choimirciú. ...
... (j) processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject. ...
... 6. I gcás ina bpróiseáiltear sonraí pearsanta chun críocha taighde eolaíoch nó stairiúil, nó chun críocha staidrimh de bhun Airteagal 89(1), beidh sé de cheart ag an ábhar sonraí, ar fhorais a bhaineann lena staid leithleach féin, agóid a dhéanamh i gcoinne sonraí pearsanta a bhaineann leis nó léi féin a phróiseáil, ach amháin i gcás gur gá an phróiseáil a dhéanamh chun cúram a chur i gcrích ar chúiseanna a bhaineann le leas an phobail. ...
... 6. Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest. ...
... (d) chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh i gcomhréir le hAirteagal 89(1) a mhéid is dócha nach féidir cuspóirí na próiseala sin a ghnóthú nó go ndéanfaí dochar dá ngnóthú de bharr an chirt dá dtagraítear i mír 1; nó ...
... (d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or ...
... (b) tá sé dodhéanta an fhaisnéis sin a chur ar fáil nó bhainfeadh iarracht dhíréireach lena cur ar fáil go háirithe nó chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh, faoi réir na gcoinníollacha agus na gcoimircí a leagtar síos in Airteagal 89(1) nó a mhéid is dócha nach féidir a chun na críocha sin h a ghnóthú de bharr an oibleagáíd dá dtagraítear i mír 1 den Airteagal seo nó go ndéanfar an gnóthú sin a lagú go mór.;Sna cásanna sin déanfaidh an rialaitheoir na bearta is gá chun cearta, saoirsí agus leasanna dlisteanacha an ábhair sonraí a chosaint, lena n-áirítear an fhaisnéis an fhaisnéis a chur ar fáil go poiblí; ...
... (b) the provision of such information proves impossible or would involve a disproportionate effort, in particular for processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the conditions and safeguards referred to in Article 89(1) or in so far as the obligation referred to in paragraph 1 of this Article is likely to render impossible or seriously impair the achievement of the objectives of that processing. In such cases the controller shall take appropriate measures to protect the data subject’s rights and freedoms and legitimate interests, including making the information publicly available; ...
... (111) Ba cheart foráil a dhéanamh go bhféadfaí sonraí a aistriú i gcúinsí áirithe i gcás ina bhfuil toiliú sainráite tugtha ag an ábhar sonraí, i gcás ina bhfuil an t-aistriú ócáideach agus riachtanach i ndáil le conradh nó le héileamh dlíthiúil, bíodh sin i nós imeachta breithiúnach nó ná bíodh, nó bíodh sé i nós imeachta riaracháin nó in aon nós imeachta lasmuigh den chúirt nó ná bíodh, lena n-áirítear nósanna imeachta os comhair comhlachtaí rialála. Ba cheart foráil a dhéanamh freisin go bhféadfaí sonraí a aistriú i gcás ina gceanglaítear amhlaidh le forais thábhachtacha leasa phoiblí a leagtar síos le dlí an Aontais nó le dlí Ballstáit nó i gcás ina ndéantar an t-aistriú ó chlár arna bhunú le dlí agus a bheartaítear chun go bhféadfaidh an pobal nó daoine a bhfuil leas dlisteanach acu é a cheadú. Sa chás deireanach sin, níor cheart aistriú den sórt sin a bheith ag baint leis na sonraí pearsanta ina n-iomláine ná le catagóirí iomlána na sonraí atá sa chlár agus, i gcás ina mbeartaítear go bhféadfaidh daoine a bhfuil leas dlisteanach acu an clár a cheadú, níor cheart an t-aistriú a dhéanamh ach arna iarraidh sin do na daoine sin nó más iad siúd atá le bheith ina bhfaighteoirí, agus lán-aird á tabhairt ar leasanna agus ar chearta bunúsacha an ábhair sonraí. ...
... (111) Provisions should be made for the possibility for transfers in certain circumstances where the data subject has given his or her explicit consent, where the transfer is occasional and necessary in relation to a contract or a legal claim, regardless of whether in a judicial procedure or whether in an administrative or any out-of-court procedure, including procedures before regulatory bodies. Provision should also be made for the possibility for transfers where important grounds of public interest laid down by Union or Member State law so require or where the transfer is made from a register established by law and intended for consultation by the public or persons having a legitimate interest. In the latter case, such a transfer should not involve the entirety of the personal data or entire categories of the data contained in the register and, when the register is intended for consultation by persons having a legitimate interest, the transfer should be made only at the request of those persons or, if they are to be the recipients, taking into full account the interests and fundamental rights of the data subject. ...
... (73) Maidir le srianta a bhaineann le prionsabail shonracha agus leis na cearta chun faisnéis a fháil, chun rochtain a fháil ar shonraí pearsanta agus chun go ndéanfaí sonraí pearsanta a cheartú nó a léirscriosadh. leis an gceart chun iniomparthacht sonraí, leis an gceart agóid a dhéanamh, le cinntí atá bunaithe ar phróifíliú, chomh maith le sárú i ndáil le sonraí pearsanta a chur in iúl don ábhar sonraí agus le roinnt oibleagáidí gaolmhara atá ar na rialaitheoirí, féadfar iad a fhorchur le dlí an Aontais nó le dlí Ballstáit, a mhéid is gá agus is comhréireach i sochaí dhaonlathach chun an tslándáil phoiblí a choimirciú, lena n-áirítear chun beatha an duine a chosaint go háirithe mar fhreagairt ar thubaistí nádúrtha nó ar thubaistí de dhéanamh an duine, chun cionta coiriúla a chosc, a imscrúdú agus a ionchúiseamh nó chun pionóis choiriúla a fhorghníomhú, lena n-áirítear coimirciú a dhéanamh i gcoinne bagairtí ar an tslándáil phoiblí agus na bagairtí sin a chosc, nó coimirciú a dhéanamh i gcoinne sáruithe eitice i gcás gairmeacha rialáilte, cuspóirí tábhachtacha eile de chuid an Aontais nó de chuid Ballstáit a bhaineann le leas ginearálta an phobail, go háirithe leas tábhachtach eacnamaíoch nó airgeadais de chuid an Aontais nó de chuid Ballstáit, clárlanna poiblí a choinneáil, ar clárlanna iad a choinnítear ar chúiseanna a bhaineann le cuspóirí tábhachtacha eile leas ginearálta an phobail, tuilleadh próiseála ar shonraí pearsanta a cartlannaíodh chun faisnéis shonrach a chur ar fáil a bhaineann le hiompar polaitiúil faoi iar-réimis ollsmachtacha stáit nó chun an t-ábhar sonraí nó cearta agus saoirsí daoine eile a chosaint, lena n-áirítear cosaint shóisialta, sláinte phoiblí agus críocha daonnúla. Ba cheart na srianta sin a bheith i gcomhréir leis na ceanglais a leagtar amach sa Chairt agus sa Choinbhinsiún Eorpach chun Cearta an Duine agus Saoirsí Bunúsacha a Chosaint. ...
... (73) Restrictions concerning specific principles and the rights of information, access to and rectification or erasure of personal data, the right to data portability, the right to object, decisions based on profiling, as well as the communication of a personal data breach to a data subject and certain related obligations of the controllers may be imposed by Union or Member State law, as far as necessary and proportionate in a democratic society to safeguard public security, including the protection of human life especially in response to natural or manmade disasters, the prevention, investigation and prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security, or of breaches of ethics for regulated professions, other important objectives of general public interest of the Union or of a Member State, in particular an important economic or financial interest of the Union or of a Member State, the keeping of public registers kept for reasons of general public interest, further processing of archived personal data to provide specific information related to the political behaviour under former totalitarian state regimes or the protection of the data subject or the rights and freedoms of others, including social protection, public health and humanitarian purposes. Those restrictions should be in accordance with the requirements set out in the Charter and in the European Convention for the Protection of Human Rights and Fundamental Freedoms. ...
... (47) Le leasanna dlisteanacha rialaitheora, lena n-áirítear leasanna dlisteanacha rialaitheora a bhféadfar sonraí pearsanta a nochtadh dó, nó le leasanna dlisteanacha tríú páirtí, féadfar bunús dlí a thabhairt don phróiseáil, ar choinníoll nach mbeadh sáraíocht ag leasanna nó cearta bunúsacha agus saoirsí bunúsacha an ábhair sonraí orthu, agus aird á tabhairt ar ionchais réasúnta na n-ábhar sonraí bunaithe ar a gcaidreamh a leis an rialaitheoir. D'fhéadfadh leas dlisteanach den sórt sin a bheith ann mar shampla i gcás ina bhfuil caidreamh ábhartha iomchuí idir an t-ábhar sonraí agus an rialaitheoir i gcásanna amhail gur cliant den rialaitheoir an t-ábhar sonraí nó go bhfuil an t-ábhar sonraí i seirbhís an rialaitheora. Ar aon chuma, chaithfí measúnú cúramach a dhéanamh ar aon leas dlisteanach a bheadh ann, lena n-áirítear a mheas an bhféadfadh an t-ábhar sonraí a bheith ag súil leis go réasúnta tráth bhailiú na sonraí pearsanta agus i gcomhthéacs bhailiú na sonraí pearsanta go bhféadfaí próiseáil a dhéanamh chun na críche sin. D'fhéadfadh sáraíocht a bheith ag leasanna bunúsacha agus ag cearta bunúsacha an ábhair sonraí ar leas an rialaitheora sonraí i gcás ina ndéanfaí sonraí pearsanta a phróiseáil in imthosca nach mbeadh na hábhair sonraí ag súil leis go ndéanfaí tuilleadh próiseála iontu. Ós rud é gur faoin reachtóir atá sé foráil a dhéanamh le dlí maidir leis an mbunús dlí atá ag údaráis phoiblí chun sonraí pearsanta a phróiseáil, níor cheart feidhm a bheith ag an mbunús dlí sin maidir le leas dlisteanach an rialaitheora i ndáil le próiseáil ag údaráis phoiblí i bhfeidhmiú a gcúraimí. Maidir le próiseáil ar shonraí pearsanta a bhfuil dianghá leo chun cosc a chur ar chalaois, is leas dlisteanach de chuid an rialatheora lena mbaineann é an leas sin. Féadfar próiseáil sonraí pearsanta chun críocha na margaíochta dírí a mheas mar phróiseáil a dhéantar ar mhaithe le leas dlisteanach. ...
... (47) The legitimate interests of a controller, including those of a controller to which the personal data may be disclosed, or of a third party, may provide a legal basis for processing, provided that the interests or the fundamental rights and freedoms of the data subject are not overriding, taking into consideration the reasonable expectations of data subjects based on their relationship with the controller. Such legitimate interest could exist for example where there is a relevant and appropriate relationship between the data subject and the controller in situations such as where the data subject is a client or in the service of the controller. At any rate the existence of a legitimate interest would need careful assessment including whether a data subject can reasonably expect at the time and in the context of the collection of the personal data that processing for that purpose may take place. The interests and fundamental rights of the data subject could in particular override the interest of the data controller where personal data are processed in circumstances where data subjects do not reasonably expect further processing. Given that it is for the legislator to provide by law for the legal basis for public authorities to process personal data, that legal basis should not apply to the processing by public authorities in the performance of their tasks. The processing of personal data strictly necessary for the purposes of preventing fraud also constitutes a legitimate interest of the data controller concerned. The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest. ...
... (112) Ba cheart feidhm a bheith ag na maoluithe sin, go háirithe maidir le haistrithe sonraí a bhfuil gá leo agus atá riachtanach ar fhorais thábhachtacha leasa phoiblí, mar shampla i gcásanna malartaithe idirnáisiúnta sonraí idir údaráis iomaíochta, idir riaracháin chánach nó idir riaracháin chustaim, idir údaráis mhaoirseachta airgeadais, idir seirbhísí atá inniúil ar ábhair maidir leis an tslándáil shóisialta, nó maidir leis an tsláinte phoiblí, mar shampla i gcás rianú teagmhála maidir le galair thógálacha nó chun dópáil sa spórt a laghdú agus/nó a dhíothú. Ba cheart a mheas go bhfuil aistriú sonraí pearsanta dleathach freisin i gcás inar gá é a dhéanamh chun leas a chosaint ar leas é atá riachtanach do leasanna ríthábhachtacha an ábhair sonraí nó duine eile, lena n-áirítear sláine fhisiciúil nó saol, mura bhféadfaidh an t-ábhar sonraí toiliú a thabhairt. In éagmais cinneadh leordhóthanachta, féadfaidh dlí an Aontais nó dlí Ballstáit, ar fhorais thábhachtacha leasa phoiblí, teorannacha a leagan síos go sainráite ar aistriú catagóirí sonracha sonraí chuig tríú tír nó chuig eagraíocht idirnáisiúnta. Ba cheart do na Ballstáit fógra a thabhairt don Choimisiún faoi fhorálacha den sórt sin. Aon aistriú chuig eagraíocht dhaonnúil idirnáisiúnta a dhéantar maidir le sonraí pearsanta ábhair sonraí nach bhfuil ar a chumas nó ar a cumas, ó thaobh fisiciúil nó dlíthiúil, toiliú a thabhairt, d'fhonn tasc atá riachtanach faoi Choinbhinsiúin na Ginéive a chomhlíonadh nó d'fhonn an dlí daonnúil idirnáisiúnta is infheidhme i gcoinbhleachtaí armtha a chomhlíonadh, d'fhéadfaí a mheas go bhfuil an t-aistriú sin riachtanach ar chúis thábhachtach a bhaineann le leas an phobail nó mar go bhfuil sé ríthábhachtach ó thaobh leas an ábhair sonraí. ...
... (112) Those derogations should in particular apply to data transfers required and necessary for important reasons of public interest, for example in cases of international data exchange between competition authorities, tax or customs administrations, between financial supervisory authorities, between services competent for social security matters, or for public health, for example in the case of contact tracing for contagious diseases or in order to reduce and/or eliminate doping in sport. A transfer of personal data should also be regarded as lawful where it is necessary to protect an interest which is essential for the data subject's or another person's vital interests, including physical integrity or life, if the data subject is incapable of giving consent. In the absence of an adequacy decision, Union or Member State law may, for important reasons of public interest, expressly set limits to the transfer of specific categories of data to a third country or an international organisation. Member States should notify such provisions to the Commission. Any transfer to an international humanitarian organisation of personal data of a data subject who is physically or legally incapable of giving consent, with a view to accomplishing a task incumbent under the Geneva Conventions or to complying with international humanitarian law applicable in armed conflicts, could be considered to be necessary for an important reason of public interest or because it is in the vital interest of the data subject. ...
... (46) Ba cheart a mheas go bhfuil próiseáil sonraí pearsanta dleathach freisin nuair is gá é a dhéanamh chun leas a chosaint ar leas é atá riachtanach do shaol an ábhair sonraí nó do shaol duine nádúrtha eile. Níor cheart sonraí pearsanta a phróiseáil ach ar bhonn leas ríthábhachtach duine nádúrtha eile i bprionsabal i gcás nach bhféadfar an phróiseáil a bhunú go follasach ar bhunús dlí eile. Le roinnt cineálacha próiseála, d'fhéadfaí fónamh do leas tábhachtach an phobail agus do leasanna ríthábhachtacha an ábhair sonraí araon, mar shampla nuair is gá an phróiseáil a dhéanamh chun críocha daonnúla, lena n-áirítear chun faireachán a dhéanamh ar eipidéimí agus ar a leathadh nó i gcásanna éigeandálaí daonnúla, go háirithe i gcásanna tubaistí nádúrtha agus tubaistí de dhéantús an duine. ...
... (46) The processing of personal data should also be regarded to be lawful where it is necessary to protect an interest which is essential for the life of the data subject or that of another natural person. Processing of personal data based on the vital interest of another natural person should in principle take place only where the processing cannot be manifestly based on another legal basis. Some types of processing may serve both important grounds of public interest and the vital interests of the data subject as for instance when processing is necessary for humanitarian purposes, including for monitoring epidemics and their spread or in situations of humanitarian emergencies, in particular in situations of natural and man-made disasters. ...