Pursuant to Article 7 of Legislative Decree 196/2003, the parties referred to in the personal information being gathered and processed have the right at any time to obtain confirmation of the existence or lack thereof of personal information concerning them, even if it is not yet recorded, and that it be communicated in an intelligible form. The concerned party has the right to obtain information about:
a) the origin of the personal information;
b) the purposes and methods of the processing;
c) the logic applied in case of processing with the assistance of electronic means;
d) the identity of the controller, managers and the representative appointed in accordance with Article 5, paragraph 2;
e) the persons or categories of persons to whom the personal information may be distributed or who might become aware of it as an appointed representative in Italy, managers or persons in charge.
The concerned party has the right to obtain:
a) updating, correction or, when applicable, integration of the information;
b) the cancellation, transformation into an anonymous form or blocking of information processed illegally, including that information which need not be kept for the purposes for which the the information was collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) were brought to the attention, also as regards their content, of the persons to whom the information was communicated or distributed, except where this requirement proves impossible or involves the use of means clearly disproportionate to the protected right.
The concerned party has the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal information concerning him, pertinent to the purpose of the collection;
b) the processing of personal information concerning him for the purpose of sending advertising materials or direct selling or else for the performance of market research or commercial communication. The rights referred to in Article 7 may be exercised by making a request to the controller or person in charge, including by means of an agent, which shall be acknowledged without delay.