Italian Legislative Decree No. 196/2003: Article 7 – Rights of access to personal data and other rights
The interested party has the right to obtain the confirmation of whether personal data that regards him/her exists or not, even if he/she is not yet registered, and his/her communications are intelligible.
The interested party has the right to obtain the information regarding:
a) the origin of personal data;
b) its end-use and its processing;
c) the method used when such processing involves computer processing;
d) the particulars related to the interested party, to managers and to the representative appointed under Article 5, comma 2;
e) the details of parties to whom personal data can be communicated or who can come to know in the role of representative appointed by the State, or managers or employees.
The interested party has the right to obtain:
a) updates, the rectification or that is, when it is desired, the inclusion of data;
b) the cancellation or transformation into anonymous status or the blocking of data processed in violation of the law, including those which are not necessary to be stored in relation to the reasons for which the data was collected or then processed.
c) the proof that the operations related to points a) and b) have been fulfilled, and also regarding their content, by those to whom the data was communicated or shared, except in the case that the fulfilment of this request is impossible or entails the carrying out of a task of such manifest enormity regarding the standards of the safeguarding of rights.
The interested party has the right to oppose, in all or in part:
a) for legitimate reasons the processing of personal data related to the interested party, despite the data being pertinent to the objectives of the collection of data;
b) the processing of personal data relating to the interested party related to the sending of promotional materials or direct selling or regarding the carrying out of market research or commercial communications.