Right of access to personal data and other rights - Art. 7 Legislative Decree no. 196/2003
1) The interested party has the right to obtain confirmation of the existence (or non-existence) of personal data – even if such data has not been registered yet – and request that such data is communicated in legible format.
2) The interested party has the right to obtain information about:
a) the origin of personal data;
b) the purposes and methods of processing;
c) the methods applied if the data is processed with electronic instruments;
d) the identity of the person in charge of processing, the managers and the representative appointed pursuant to Art. 5, paragraph 2;
e) the entities – or categories of entities – to which personal data may be disclosed or come to their knowledge since they are representatives appointed for the territory of the State, managers or persons in charge.
3) The interested party has the right to obtain:
a) the update, correction or integration of data, if interested;
b) the cancellation, transformation in anonymous form or block of data processed in breach of the law, including data that does not need to be stored with regard to the purposes for which it has been collected or subsequently processed;
c) confirmation that the operations detailed in letters a) and b) were notified to those to which data was communicated or disclosed, also with regard to its content, except for the case in which such operation becomes impossible or implies the use of instruments that are clearly disproportionate to the right itself.
4) The interested party has the right to object, in full or in part, to:
a) the processing of personal data for legitimate reasons, even though it is relevant to the purpose of collection;
b) the processing of personal data for the purpose of sending advertising or direct sale material, or carrying out market research or commercial communication.