7.3. for a natural person and legal person:

The information entered in the ESAs Information System under paragraph 7 will be kept in the ESAs Information System for a maximum period of 15 years from the date of entry by a competent authority and then automatically deleted from the ESAs Information System. Competent authorities may apply shorter retention periods. Where shorter retention periods have been applied in line with applicable Union or national law, the competent authority should remove the data from the ESAs Information System accordingly after such periods end. In addition to the expiration of the retention period, information could also be deleted by competent authorities upon receiving notification that the person of interest is deceased. The above is without prejudice to the right of access, rectification or erasure by the concerned data subjects as provided for in Articles 17, 18 and 19 of Regulation (EU) 2028/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies.

Competent authorities should designate contact points for receiving and responding to requests and make this information available in the ESAs Information System. The contact point details should include the functional e-mail address used in the process of fitness and propriety assessments, a phone number of the unit/department dealing with the fit and proper assessments (optionally) and, for relevant staff members, the given name(s) / family name, position, professional e-mail address and phone number.

Competent authorities should keep the lists of contact points, including functional e-mail addresses, up to date and review them at least annually.

Data searches within the ESAs Information System

Before a competent authority makes an assessment of the fitness and propriety of a person of interest in accordance with Union sectoral provisions, the competent authority should look up in the ESAs Information System if there is any other competent authority that holds information on this person of interest.