1.The Council and the High Representative may process personal data in order to carry out their tasks under this Decision, in particular:
(a)as regards the Council, for preparing and making amendments to the Annex;
(b)as regards the High Representative, for preparing amendments to the Annex.
2.The Council and the High Representative may process, where applicable, relevant data relating to criminal offences committed by listed natural persons, to criminal convictions of such persons or to security measures concerning such persons, only to the extent that such processing is necessary for the preparation of the Annex.
3.For the purposes of this Decision, the Council and the High Representative are designated as ‘controllers’ within the meaning of point (8) of Article 3 of Regulation (EU) 2018/1725 of the European Parliament and of the Councilnote, in order to ensure that the natural persons concerned can exercise their rights under Regulation (EU) 2018/1725.