Acts 2017
(b)
the purpose for which the data are being collected;
(c)
the intended recipients of the data;
489
(d) whether or not the supply of the data by that data
subject is voluntary or mandatory;
(e)
the existence of the right to withdraw consent at any
time, without affecting the lawfulness of processing
based on consent before its withdrawal;
(f)
the existence of the right to request from the controller
access to and rectification, restriction or erasure of
personal data concerning the data subject or to object
to the processing;
(g)
the existence of automated decision making, including
profiling, and information about the logic involved, as
well as the significance and the envisaged consequences
of such processing for the data subject;
(h)
the period for which the personal data shall be stored;
(i)
the right to lodge a complaint with the Commissioner;
(j)
where applicable, that the controller intends to transfer
personal data to another country and on the level of
suitable protection afforded by that country; and
(k) any further information necessary to guarantee fair
processing in respect of the data subject’s personal
data, having regard to the specific circumstances in
which the data are collected.
(3)
where –
A controller shall not be required to comply with subsection (2)
(a)
the data subject already has the information referred to
in subsections (1) and (2); or
(b)
the data are not collected from the data subject and –
(i) the provision of such information proves
impossible or would involve a disproportionate
effort; or