- The statement that the conditions mentioned in Article 22 of the hereby Act
are fulfilled;
In case of any change in the above conditions, the authorization of the
"Instance" shall be obtained.
The application for authorization is introduced by the data controller or his
legal representative.
The authorization does not exempt the data controller or his legal
representative from his responsibility toward third-parties.
Conditions and proceedings of the application for authorization shall be set by
decree.
Section II Obligations incumbent upon data controllers
Article 9:
The processing of personal data shall be done as part of the respect of
human dignity, privacy and public liberties.
The processing of personal data, whatever its origin or its methods shall not
harm the human rights protected by the laws and the rules in force. In every
case, it is forbidden to use personal data with the aim of infringing people's
rights or damaging their reputation.
Article 10:
Collecting of personal data shall be exclusively carried out for lawful, given
and clear purposes.
Article 11:
The processing of personal data shall be done loyally within the limits of the
collecting purpose. The data controller shall also make sure of the accuracy,
precision and update of the data.
Article 12:
The processing of personal data shall not be carried out for other purposes
than that which it has been collected for, except for the following:
- If the data subject has given his consent;
- If the processing is essential for the safety of the data subject's vital
interest;
- If the processing is essential for definite scientific purposes.
Article 13:
The processing of personal data relating to offenses, convictions, criminal
prosecutions, sentencing and penalties and security measures or previous
criminal records is not allowed.
Article 14:
The processing of personal data that reveals, directly or indirectly, the racial
and genetic origins, religious beliefs, political, philosophical and trade union
belonging or health is prohibited
However, the prohibition provided for the above shall not apply to the
processing for which the data subject has given his explicit consent by any
3