The data controller and those who intervene in any phase of the processing of personal data are obliged to maintain professional secrecy with respect to that data and their duty to store it. These obligations continue to exist even after the relationship with the data subject or their representative, if applicable, has ceased.