CHAPTER 4. RIGHTS OF THE PERSON CONCERNED

Article 27

1.          The person concerned has the right, freely and at reasonable intervals, to address requests to the responsible party for information regarding whether personal data concerning him are processed. The responsible party shall notify the person concerned in writing, within four weeks, as to whether personal data concerning him are processed.

2.          If such data are processed, the notice shall provide a full review of this in a comprehensible form, a description of the purpose or purposes of the processing, the categories of data to which the

processing relates and the recipients or categories of recipients, as well as the available information on the origin of the data.

3.          Before a responsible party issues a notice as referred to in the first paragraph, concerning which a third party can be expected to have reservations, he shall give that third party an opportunity to present its view if the notice contains data that concern that party, unless this proves to be impossible or costs a disproportionate effort.

4.          On request, the responsible party shall issue notices concerning the underlying rationale for the automated processing of the data concerning him.