Right to access personal data and other rights
1. The person involved has the right
to receive confirmation regarding the existence of his/her personal data, even if not yet recorded, and the communication of such data in an understandable form.
2. The person involved has the right to obtain information about
a) the origin of the personal data;
b) the purposes and procedures of the data processing operations;
c) the applied logic in case of data processing carried out with the use of electronic devices;
d) data identifying the data processing holder, the persons responsible and the representative designated in accordance with article 5, subparagraph 2;
e) the subjects or the categories of subjects to which the personal data can be communicated or that can become familiar with such data as the designated representative in the territory of the country, of those responsible or those assigned.
3. The person involved has the right
a) to update, correct or, when so requested, to supplement the data;
b) to cancel, to convert into an anonymous format or to block the data processed in violation of the law, including the data for which storage is not necessary considering the purposes for which the data were acquired or subsequently processed;
c) to certify that the operations described in letters a) and b) were divulged, also with regard to their contents, to those to whom the information was communicated or divulged, except for the case in which such compliance is impossible or involves means the use of which is significantly beyond the scope of protecting such a right.
4. The person involved has the right to object, in all or part
a) for legitimate reasons to the processing of his/her personal data, though pertinent to the collection purpose;
b) to the processing of personal data that involves him/her for the purpose of transmitting advertising or direct sales material or to carry out market or commercial communication surveys and research.