The data subject shall have the right to obtain from the EPPO confirmation as to whether or not operational personal data concerning him/her are being processed, and, where that is the case, access to the operational personal data and the following information:
the purposes of and legal basis for the processing;
the categories of operational personal data concerned;
the recipients or categories of recipients to whom the operational personal data have been disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the operational personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the EPPO rectification or erasure of operational personal data or restriction of processing of operational personal data concerning the data subject;
the right to lodge a complaint with the European Data Protection Supervisor and the contact details of the European Data Protection Supervisor;
the communication of the operational personal data undergoing processing and of any available information as to their origin.