Protection of personal data

1.   The processing of personal data carried out within the framework of this Regulation including, in particular, for the purposes of verification of the subscriber’s Member State of residence under Article 5, shall be carried out in compliance with Directives 95/46/EC and 2002/58/EC. In particular, the use of the means of verification in accordance with Article 5 and any processing of personal data under this Regulation, shall be limited to what is necessary and proportionate in order to achieve its purpose.
2.   Data collected pursuant to Article 5 shall be used solely for the purpose of verifying the subscriber’s Member State of residence. They shall not be communicated, transferred, shared, licensed or otherwise transmitted or disclosed to holders of copyright or related rights or to those holding any other rights in the content of online content services, or to any other third parties.
3.   Data collected pursuant to Article 5 shall not be stored by the provider of an online content service longer than necessary to complete a verification of a subscriber’s Member State of residence pursuant to Article 5(1) or (2). On completion of each verification, the data shall be immediately and irreversibly destroyed.