The data subject shall have the right to obtain from the EPPO confirmation as to whether or not operational personal data concerning him/her are being processed, and, where that is the case, access to the operational personal data and the following information:

1. (a)

   the purposes of and legal basis for the processing;

2. (b)

   the categories of operational personal data concerned;

3. (c)

   the recipients or categories of recipients to whom the operational personal data have been disclosed, in particular recipients in third countries or international organisations;

4. (d)

   where possible, the envisaged period for which the operational personal data will be stored, or, if not possible, the criteria used to determine that period;

5. (e)

   the existence of the right to request from the EPPO rectification or erasure of operational personal data or restriction of processing of operational personal data concerning the data subject;

6. (f)

   the right to lodge a complaint with the European Data Protection Supervisor and the contact details of the European Data Protection Supervisor;

7. (g)

   the communication of the operational personal data undergoing processing and of any available information as to their origin.