time of collecting the personal data, ensure that the data subject concerned is informed of – (a) the identity and contact details of the controller and, where applicable, its representative and any data protection officer; (b) the purpose for which the data are being collected; (c) the intended recipients of the data; (d) whether or not the supply of the data by that data subject is voluntary or mandatory; (e) the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; (f) the existence of the right to request from the controller access to and rectification, restriction or erasure of personal data concerning the data subject or to object to the processing; (g) the existence of automated decision making, including profiling, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; (h) the period for which the personal data shall be stored; (i) the right to lodge a complaint with the