"Code concerning the protection of personal data" which are given the articles:
2. You have the right to obtain information:
a) source of personal data;
b) the purposes and methods of treatment;
c) the logic applied in case of treatment with electronic instruments;
d) the identity of the owner, manager and the representative appointed under article 5, paragraph 2;
e) subjects or categories of persons to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents.
3. You have the right to:
a) updating, rectification or, when interested, integration of data;
c) confirmation that the operations in letters a) and b) have been notified, also as regards their content, of those to whom the data were communicated or disclosed, except if this requirement impossible or involves a manifestly disproportionate to the protected right.
4. You have the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal data, pertinent for collection purposes;
b) to the processing of personal data for purposes of sending advertising materials or direct sales or for carrying out market research or commercial communication.
2. The rights referred to in Article 7 may not be exercised with a request to the owner or manager or an action under Article 145, if the processing of personal data are processed:
a) under the provisions of the Decree-Law of 3 May 1991, n. 143, converted, with amendments, into law in July 1991, n. 197, as amended, concerning money laundering;
b) under the provisions of the decree-law 31 December 1991 n. 419, converted, with amendments, into law on Feb. 18, 1992, n. 172, as amended, concerning support for victims of extortion;
c) by parliamentary Inquiry Committees set up under Article 82 of the Constitution;
d) by a public body other than public economic bodies, according to an express provision of law, exclusively for purposes related to monetary policy, payment systems, supervision of brokers and credit and financial markets, as well as the protection their stability;
e) pursuant to Article 24, paragraph 1, letter f), limited to the period during which could result in a real and concrete prejudice for the performance of the defensive investigations or for the exercise of the right in court;
f) by providers of electronic communications services accessible to the public in respect of incoming phone calls, unless this may be a real and concrete prejudice for the performance of the defensive investigations referred to the Law of 7 December 2000, n. 397;
g) for reasons of justice by judicial authorities at all levels or the Council of the Judiciary or other self-governing bodies or the Ministry of Justice;
h) under Article 53, except as provided by law April 1, 1981, n. 121.
3. The Guarantor, including a report in the cases ofwhich paragraph 2, letters a), b), d), e) and f) shall in the manner set out in Articles 157, 158 and 159 and, in the cases in letters c), g) and h) of that subsection, shall in the manner provided for in Article 160.
4. The exercise of the rights referred to in Article 7, when not about objective data, can take place unless it concern rectification of or additions to personal evaluation data relating to judgments, opinions or other assessments of a subjective, as well as the specification of policies to be implemented or decision-making activities by the data controller.
2. In the exercise of the rights referred to in Article 7 subject may grant, in writing, delegate or proxy to individuals, institutions, associations or bodies. The subject may also be assisted by a person of trust.
3. The rights under article 7 referring to personal data concerning deceased persons may be exercised by any entity that is interested therein or else acts to protect or for family reasons deserving protection.
4. The identity shall be verified on the basis of suitable information, also by means of available records or documents or by producing or attaching a copy of an identification document. The person who acts on behalf of exhibits or attach a copy of the proxy, or the delegation signed in the presence of an agent or signed and submitted with a non-authenticated photocopy of a document of the interested. If the person concerned is a legal person, entity or association, the request is filed by a person entitled under their respective statutes or regulations.
5. The request in Article 7 paragraphs 1 and 2 is formulated freely and without constriction and can be renewed, unless there are justified reasons, after no less than ninety days.
a) to facilitate access to personal data transmitted, even through the use of ad hoc software allowing accurate retrieval of the data concerning individual identified or identifiable;
b) simplify the arrangements and reduce the delay for the responses, even within departments or offices to public relations.
2.
The data is extracted by the responsible or in charge and can
be communicated to the applicant even verbally, or in
displayed by electronic means, provided that in such cases the
understanding of data are easily considered the quality and
amount of information. If requested, a decision to
Extrapolation of the data on paper or magnetic media, or the
their electronic transmission.
3. Unless the request concerns either a specific processing operation or specific personal data or categories of personal data, the interested party includes all the personal data concerning him are processed by the holder. If the request is made to an operator a health profession or a sanitary organism observes the provision of Article 84, paragraph 1.
4. When the data retrieval is especially difficult, the response to the request may also consist in producing or delivering copy of records and documents containing the personal data requested.
5. The right to obtain communication in an intelligible form of the data does not apply to personal data relating to third parties, unless breaking down the processed data or eliminating certain elements makes incomprehensible personal data relating to the person.
6. Data communication is in intelligible form also by using legible handwriting. In case of communication of codes or abbreviations are supplied, also by means of the charge, the parameters for the understanding of its meaning.
7. When, following a request under Article 7, commi1 and 2, letters a), b) and c) not confirmed the existence of data concerning him, may be charged a fee not exceeding the costs actually incurred for the inquiries made in the specific case.
8. The fee referred to in paragraph 7 may not exceed the amount determined by the Guarantor with general measure, which can locate a flat rate in relation to the case where the data are processed by electronic means and the response is provided verbally. With the same provision the Guarantor may provide that the fee may be charged if the personal data are contained on special media whose reproduction is specifically requested, or when, at one or more holders, determines a significant use of resources in relation to complexity or amount of the requests and confirmed the existence of data concerning him.
9. The fee referred to in paragraphs 7 and 8 may also be paid by postal or bank, or by debit or credit card, if possible upon receiving the relevant response and anyhow within fifteen days of said response.
a) processed lawfully and fairly;
b) collected and recorded for specific, explicit and legitimate purposes and used in other processing operations in terms compatible with those purposes;
c) accurate and, where necessary, updated;
d) adequate, relevant and not excessive for the purposes for which they were collected or subsequently processed;
e) kept in a form which permits identification of data for a period of time no longer than necessary for the purposes for which they were collected and subsequently processed.
2. Personal data processed in violation of the regulations governing the processing of personal data can not be used.