Art. 7 Decree-law 196 of 30/06/2003

(Right of accessing personal data and other rights)

1. The concerned party has the right to be informed whether personal data concerning him/her exist, even though not yet registered and to receive them in a comprehensible manner.

2. The concerned party has the right to be informed of:
a) The origin of his/her personal data;
b) The purpose and way of data processing;
c) The logics applied in case of processing performed by means of electronic devices;
d) The data identifying the holder, those in charge, and the appointed representative under article 5, para. 2 of data processing;
e) Either the subjects or categories of subjects to whom personal data might by forwarded or who may become aware of it in their capacity of appointed representative within the Country territory, of those in charge or appointed.

3. The concerned party has the right to obtain:
a) The updating, amendment or the supplement of data, whenever the said party is interested in it;
b) The removal, transformation into anonymous form or totally of data processing in breach of the law, including data for which storage is not required as regards the purpose of data collection and processing;
c) The declaration that operations in item a) and b) were disclosed, their contents included, to anyone to whom data were communicated or distributed, save in case such fulfilment is either impossible or implies an excessive use of means with respect to the protected right.

4. The concerned party has the right to oppose, in full or in part:
a) For legitimate reasons, to the processing of personal data concerning such party though they relate to the collection purpose;
b) To the processing of personal data concerning such party for the purpose of advertising material or of direct sale or to carry out market surveys or of business communication.