2.  The person concerned is entitled to obtain information about:

1. Where the personal data comes from;
2. the purposes and methods of the data handling;
3. the logic applied in case of handling carried out with the aid of electronic instruments;
4. the identification details of the owner, of the people responsible and of the appointed representative according to Article 5, comma 2;
5. the people or categories of people to whom the data may be distributed or who may become aware of it in their role of appointed State area representatives, managers or people assigned specific tasks.

3. The person concerned is entitled to obtain:

1. Updates, corrections or, if it should be of his or her interest, additions to the data;
2. The cancellation, transformation into anonymous form or blocking of data handled in breach of the law, including data which does not need to be kept for the purposes for which it was collected or subsequently handled;;
3. a declaration that the operations referred to in letters a) and b) have been made known, even with regards to their content, to those people to whom the data has been communicated or distributed, except in the case where compliance with this is found to be impossible or involves the use of means that are manifestly out of proportion compared to the right being safeguarded.

4. The person concerned is entitled to object, entirely or in part::

1. for legitimate reasons, to the handling of personal data regarding him or her, even though it may be pertinent to the aim of the data collection;