03/02/2020 CURIA - Documents Member States’ international obligations and notably the TRIPS Agreement, including those relating to criminal procedures and penalties; any national provisions in Member States relating to criminal procedures or penalties in respect of infringement of intellectual property rights.’ Article 3 of Directive 2004/48 provides: ‘1. Member States shall provide for the measures, procedures and remedies necessary to ensure the enforcement of the intellectual property rights covered by this Directive. Those measures, procedures and remedies shall be fair and equitable and shall not be unnecessarily complicated or costly, or entail unreasonable time-limits or unwarranted delays. 2. Those measures, procedures and remedies shall also be effective, proportionate and dissuasive and shall be applied in such a manner as to avoid the creation of barriers to legitimate trade and to provide for safeguards against their abuse.’ Article 8 of Directive 2004/48 provides: ‘1. Member States shall ensure that, in the context of proceedings concerning an infringement of an intellectual property right and in response to a justified and proportionate request of the claimant, the competent judicial authorities may order that information on the origin and distribution networks of the goods or services which infringe an intellectual property right be provided by the infringer and/or any other person who: was found in possession of the infringing goods on a commercial scale; was found to be using the infringing services on a commercial scale; was found to be providing on a commercial scale services used in infringing activities; or was indicated by the person referred to in point (a), (b) or (c) as being involved in the production, manufacture or distribution of the goods or the provision of the services. 2. The information referred to in paragraph 1 shall, as appropriate, comprise: the names and addresses of the producers, manufacturers, distributors, suppliers and other previous holders of the goods or services, as well as the intended wholesalers and retailers; information on the quantities produced, manufactured, delivered, received or ordered, as well as the price obtained for the goods or services in question. 3. Paragraphs 1 and 2 shall apply without prejudice to other statutory provisions which: grant the rightholder rights to receive fuller information; govern the use in civil or criminal proceedings of the information communicated pursuant to this Article; govern responsibility for misuse of the right of information; or afford an opportunity for refusing to provide information which would force the person referred to in paragraph 1 to admit to his/her own participation or that of his/her close relatives in an infringement of an intellectual property right; or govern the protection of confidentiality of information sources or the processing of personal data.’ Provisions on the protection of personal data – Directive 95/46/EC Article 2 of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31) states: ‘For the purposes of this Directive: “personal data” shall mean any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity; “processing of personal data” (“processing”) shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction; According to Article 3 of Directive 95/46: ‘1. This Directive shall apply to the processing of personal data wholly or partly by automatic means, and to the processing otherwise than by automatic means of personal data which form part of a filing system or are intended to form part of a filing system. …’ Article 7 of Directive 95/46 reads as follows: ‘Member States shall provide that personal data may be processed only if: … processing is necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection under Article 1(1).’ Article 8 of Directive 95/46 provides: ‘1. Member States shall prohibit the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. 2. Paragraph 1 shall not apply where: curia.europa.eu/juris/document/document.jsf?text=&docid=70107&pageIndex=0&doclang=EN&mode=lst&dir=&occ=first&part=1&cid=116452) 3/9