/Docs/G/EU-GDPR-Law-CmA/Sec/Article/14.md
  Source views: Source JSON(ish) on GitHub (VSCode)   Doc views: Document (&k=r00t): Visual Print Technical: OpenParameters Xray
Ti = Article 14 - Information to be provided where {_personal_data} have not been obtained from the {_data_subject}
1.0.sec = Where {_personal_data} have not been obtained from the {_data_subject}, the {_controller} shall provide the {_data_subject} with the following information:
1.1.sec = the identity and the contact details of the {_controller} and, if any, of the {_controller}'s {_representative};
1.2.sec = the contact details of the data protection officer, where applicable;
1.3.sec = the purposes of the {_processing} for which the {_personal_data} are intended as well as the legal basis for the {_processing};
1.4.sec = the categories of {_personal_data} concerned;
1.5.sec = the {_recipients} or categories of {_recipients} of the {_personal_data}, where applicable;
1.6.sec = where applicable, that the {_controller} intends to transfer {_personal_data} to a {_recipient} in a third country or {_international_organisation} and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means to obtain a copy of them or where they have been made available.
1. = [G/Z/ol-a/s6]
2.0.sec = In addition to the information referred to in paragraph 1, the {_controller} shall provide the {_data_subject} with the following information necessary to ensure fair and transparent {_processing} in respect of the {_data_subject}:
2.1.sec = the period for which the {_personal_data} will be stored, or if that is not possible, the criteria used to determine that period;
2.2.sec = where the {_processing} is based on point (f) of Article 6(1), the legitimate interests pursued by the {_controller} or by a {_third_party};
2.3.sec = the existence of the right to request from the {_controller} access to and rectification or erasure of {_personal_data} or {_restriction_of_processing} concerning the {_data_subject} and to object to {_processing} as well as the right to data portability;
2.4.sec = where {_processing} is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw {_consent} at any time, without affecting the lawfulness of {_processing} based on {_consent} before its withdrawal;
2.5.sec = the right to lodge a complaint with a {_supervisory_authority};
2.6.sec = from which source the {_personal_data} originate, and if applicable, whether it came from publicly accessible sources;
2.7.sec = the existence of automated decision-making, including {_profiling}, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such {_processing} for the {_data_subject}.
2. = [G/Z/ol-a/s7]
3.0.sec = The {_controller} shall provide the information referred to in paragraphs 1 and 2:
3.1.sec = within a reasonable period after obtaining the {_personal_data}, but at the latest within one month, having regard to the specific circumstances in which the {_personal_data} are processed;
3.2.sec = if the {_personal_data} are to be used for communication with the {_data_subject}, at the latest at the time of the first communication to that {_data_subject}; or
3.3.sec = if a disclosure to another {_recipient} is envisaged, at the latest when the {_personal_data} are first disclosed.
3. = [G/Z/ol-a/s3]
4.sec = Where the {_controller} intends to further process the {_personal_data} for a purpose other than that for which the {_personal_data} were obtained, the {_controller} shall provide the {_data_subject} prior to that further {_processing} with information on that other purpose and with any relevant further information as referred to in paragraph 2.
5.sec = Paragraphs 1 to 4 shall not apply where and insofar as:
5.1.sec = the {_data_subject} already has the information;
5.2.sec = the provision of such information proves impossible or would involve a disproportionate effort, in particular for {_processing} for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the conditions and safeguards referred to in Article 89(1) or in so far as the obligation referred to in paragraph 1 of this Article is likely to render impossible or seriously impair the achievement of the objectives of that {_processing}. In such cases the {_controller} shall take appropriate measures to protect the {_data_subject}'s rights and freedoms and legitimate interests, including making the information publicly available;
5.3.sec = obtaining or disclosure is expressly laid down by Union or Member State law to which the {_controller} is subject and which provides appropriate measures to protect the {_data_subject}'s legitimate interests; or
5.4.sec = where the {_personal_data} must remain confidential subject to an obligation of professional secrecy regulated by Union or Member State law, including a statutory obligation of secrecy.
5. = [G/Z/ol-a/s4]
= [G/Z/ol/s5]