I. – The data controller makes the following information available to the data subject:
1 ° The identity and contact details of the data controller and, where applicable, those of his representative;
2 ° Where applicable, the contact details of the data protection officer;
3 ° The purposes pursued by the processing for which the data are intended;
4 ° The right to lodge a complaint with the National Commission for Informatics and Freedoms and the contact details of the commission;
5 ° The existence of the right to request from the data controller access to personal data, their rectification or erasure, and the existence of the right to request a limitation of the processing of personal data relating to a data subject .
II. – In addition to the information mentioned in I, the data controller provides the data subject, in specific cases, with the following additional information in order to enable them to exercise their rights:
2 ° The retention period of personal data or, failing that when this is not possible, the criteria used to determine this period;
3 ° Where applicable, the categories of recipients of personal data, including those established in States which do not belong to the European Union or within international organizations;
4 ° If necessary, additional information, in particular when the personal data are collected without the knowledge of the data subject.
The data subject has the right to obtain from the controller confirmation that personal data concerning him or her are or are not being processed and, when they are, the right to access such data as well as the following information :
3 ° The recipients or categories of recipients to whom the personal data have been communicated, in particular recipients who are established in States that do not belong to the European Union or within international organizations;
4 ° When possible, the planned retention period for personal data or, failing this when this is not possible, the criteria used to determine this period;
5 ° The existence of the right to ask the controller for the rectification or erasure of personal data, and the existence of the right to request a limitation of the processing of such data;
6 ° The right to lodge a complaint with the National Commission for Informatics and Freedoms and the contact details of the commission;
7 ° The communication of personal data being processed as well as any information available as to their source.
I. – The data subject has the right to obtain from the controller:
1 ° That personal data concerning him which are inaccurate be rectified as soon as possible;
2 ° That incomplete personal data concerning him be completed, including by providing an additional declaration for this purpose;
3 ° That personal data concerning him be erased as soon as possible when the processing is carried out in violation of the provisions of this law or when these data must be erased to comply with a legal obligation to which the data controller is subject;
4 ° That the processing be limited in the cases provided for in III of this article.