1. The Commission shall process personal data in order to carry out its tasks under this Regulation. These tasks include the handling of information on deposits and information on authorisations granted by the competent authorities.
2. For the purposes of this Regulation, the Commission is designated as "controller" within the meaning of Article 3(8) of Regulation (EU) 2018/1725 in relation to the processing activities necessary to accomplish the tasks referred to in paragraph 1.
3. The competent authorities of the Member States, including enforcement authorities, customs authorities within the meaning of Regulation (EU) No 952/2013 of the European Parliament and of the Council [Regulation (EU) No 952/2013 of the European Parliament and of the Council of 9 October 2013 laying down the Union Customs Code (OJ L 269, 10.10.2013, p. 1).], competent authorities within the meaning of Regulation (EU) No 575/2013, Directive (EU) 2015/849 of the European Parliament and of the Council [Directive
…