- The statement that the conditions mentioned in Article 22 of the hereby Act are fulfilled; In case of any change in the above conditions, the authorization of the "Instance" shall be obtained. The application for authorization is introduced by the data controller or his legal representative. The authorization does not exempt the data controller or his legal representative from his responsibility toward third-parties. Conditions and proceedings of the application for authorization shall be set by decree. Section II Obligations incumbent upon data controllers Article 9: The processing of personal data shall be done as part of the respect of human dignity, privacy and public liberties. The processing of personal data, whatever its origin or its methods shall not harm the human rights protected by the laws and the rules in force. In every case, it is forbidden to use personal data with the aim of infringing people's rights or damaging their reputation. Article 10: Collecting of personal data shall be exclusively carried out for lawful, given and clear purposes. Article 11: The processing of personal data shall be done loyally within the limits of the collecting purpose. The data controller shall also make sure of the accuracy, precision and update of the data. Article 12: The processing of personal data shall not be carried out for other purposes than that which it has been collected for, except for the following: - If the data subject has given his consent; - If the processing is essential for the safety of the data subject's vital interest; - If the processing is essential for definite scientific purposes. Article 13: The processing of personal data relating to offenses, convictions, criminal prosecutions, sentencing and penalties and security measures or previous criminal records is not allowed. Article 14: The processing of personal data that reveals, directly or indirectly, the racial and genetic origins, religious beliefs, political, philosophical and trade union belonging or health is prohibited However, the prohibition provided for the above shall not apply to the processing for which the data subject has given his explicit consent by any 3