1.

The controller shall provide a data subject from whom data relating to himself/herself are collected with at least the following information, except where he or she already has it: the identity of the controller; the purposes of the processing operation for which the data are intended; the recipients or categories of recipients of the data; whether replies to the questions are obligatory or voluntary, as well as the possible consequences of failure to reply; the existence of the right of access to, and the right to rectify, the data concerning him or her; any further information such as: the legal basis of the processing operation for which the data are intended, the time-limits for storing the data, the right to have recourse at any time to the European Data Protection Supervisor, insofar as such further information is necessary, having regard to the specific circumstances in which the data are collected, to guarantee fair processing in respect of the data subject.

← art_11__para · All articles · (a) →

Source: EUR-Lex (Cellar) · retrieved 2026-10-27 · Text as adopted (Official Journal); later amendments are not incorporated in this text.