Article n.7 of the Personal data protection code: “Rights of access to personal data and other rights”

1. The data subject is entitled to obtain confirmation as to whether or not personal data concerning him/her exists, even if not yet recorded, and to be provided with said data in intelligible form.
2. The data subject is entitled to obtain specification:
a) of the source of the personal data;
b) of the purposes and procedures of processing;
c) of the logic applied in the case of processing performed with the aid of electronic instruments;
d) of the identification details of the data controller, of the data processor and of the representative appointed pursuant to Article 5, sub-section 2;
e) of the subjects or of the category of subjects to which the personal data may be disclosed or which may come to acquire said data in their capacity as representative appointed in state territory, as processors or appointed operators.
3. The data subject is entitled to obtain:
a) update, correction or, if in his/her interest, integration of the data;
b) deletion, conversion into anonymous form or blocking of the data processed in breach of the law, including cases in which conservation is not necessary for the purposes for which the data was gathered or subsequently processed;
c) certification that the operations referred to in letters a) and b), and their content, have been brought to the attention of those to whom the data have been communicated or disclosed, excepting the case in which compliance with this obligation would prove impossible or involve the use of means that are clearly disproportionate to the protected right.
4. The data subject is entitled to fully or partially oppose:
a) for legitimate reasons the processing of personal data concerning him/her, even if pertinent to the purpose for which it was gathered;
b) the use of personal data concerning him/her for dispatching advertising or direct sales material or for carrying out a market research or for commercial notices.