LEGISLATIVE DECREE 30.06.2003 No. 196
TITLE II, DATA SUBJECT’S RIGHTS ARTICLE 7
(RIGHT OF ACCESS TO PERSONAL DATA AND OTHER RIGHTS)
1. The data subject has the right to obtain confirmation of whether personal data concerning him/her exist, even if not registered yet, and their communication in an intelligible form.
2. The data subject shall have the right to obtain information about:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in event of processing carried out with the aid of electronic instruments;
d) the identity of the owner, manager and the representative appointed under article 5, paragraph 2;
e) the recipients or categories of recipients to whom the data may be communicated, or who can learn about them as appointed representative of the State, managers or agents.
3. The data subject shall have the right to obtain:
a) updates, rectification or, when pertinent, integration of data;
b) the cancellation, the transformation in anonymous form or the block of data processed in violation of the law, including the data that does not need to be retained in relation to the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in points a) and b) have been brought to the attention, also regarding their content, to anyone who the data has been communicated or distributed, except in the case where this proves impossible or involves a disproportionate use of means with respect to the protected right.
4. You have the right to object, in whole or in part:
a) for legitimate reasons regarding the processing of personal data, even if it pertains to its collection purpose;
b) regarding the processing of personal data for purposes of sending advertising material or direct selling or for carrying out market research or business communication.