Article 6 — Processing of personal data

1. The Secretariat may process personal data of registered jobseekers from third countries and those of participating employers and other participating entities only to the extent necessary for the performance of its tasks pursuant to Article 8(2). When processing personal data for that purpose, the Secretariat shall act as controller as defined in Article 3, point (8), of Regulation (EU) 2018/1725. 2. The National Contact Points may process personal data of registered jobseekers from third countries and those of participating employers and other participating entities only to the extent necessary for the performance of their tasks pursuant to Article 10(2). When processing personal data for that purpose, National Contact Points shall act as controllers as defined in Article 4, point (7), of Regulation (EU) 2016/679. 3. Profiles of registered jobseekers from third countries shall include the name, surname, contact details, date of birth and nationality or nationalities, information on academic and professional qualifications, volunteering or work experience, other skills and language knowledge. Profiles of registered jobseekers from third countries may also include information on the availability of the jobseeker from a third country to start work and the Member States of preference. 4. The Secretariat and the National Contact Points shall inform registered jobseekers from third countries, and participating employers and other participating entities about the processing of their personal data and their rights as data subjects as well as about their rights under paragraphs 5 and 6. 5. The personal data registered in or transmitted to the IT Platform in accordance with this Regulation shall be indexed, stored and made available there solely for search and matching purposes. Registered jobseekers from third countries shall have the right to edit, delete or restrict access to their personal data. 6. Profiles of registered jobseekers from third countries that have not been accessed by the jobseekers concerned for a period of one year shall be removed and no personal data shall be stored. In such cases, the jobseekers concerned shall be automatically notified one month prior that their profiles will be removed if they are not accessed within that period. Once profiles are removed, a limited set of anonymised data may continue to be stored for research and statistical purposes as well as to extract data to improve the functioning of the EU Talent Pool. 7. The Secretariat shall make the data included in the profiles of registered jobseekers from third countries and the job vacancies of participating employers and other participating entities available for searches and matching on the IT Platform. 8. The data included in the profiles of registered jobseekers from third countries shall be accessible only to participating employers and other participating entities, and to the National Contact Points. The data included in the job vacancies shall be accessible to registered jobseekers from third countries and to the National Contact Points. 9. The processing of data on the jobseeker’s Member States of preference as referred to in paragraph 3 of this Article for the purpose of matching in accordance with Article 16 shall be prohibited. 10. The Commission shall adopt, by means of implementing acts, further provisions on the personal data to be processed and included in the job vacancies and profiles of registered jobseekers from third countries , on the responsibilities of controllers, including rules governing the possible use of a processor or processors, as well as on the conditions for accessing personal data and the option available to registered jobseekers from third countries to restrict the access to their personal data on the IT Platform. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 22(2).