(1) Authorities entitled to check identification may not use identity cards for the automated retrieval of personal data. In derogation from the first sentence, federal and state police authorities and offices, customs administration authorities and state tax investigation units may, within the framework of their duties and powers, use identity cards for the automated retrieval of personal data stored in police databases for the following purposes:
1. border control,
2. alerts or to establish a person’s whereabouts for the purpose of criminal prosecution, enforcement of a criminal sentence or to prevent threats to public security, and
3. customs control as part of police surveillance.
No subject-related record of database searches that have not yielded any results may be kept, except as provided in legal provisions enacted in accordance with subsection 2.
(2) In the cases referred to in subsection 1, unless the law provides otherwise, personal data may not be stored in databases when the identity card is read automatically; this shall also apply to searches of police databases that have yielded results.