(c) other information such as: The recipients or categories of recipients; Whether replies are obligatory or voluntary, as well as the possible consequences of failure to reply; The existence and conditions of the right of access and the right to rectify, provided they are necessary, taking account of the specific circumstances of collection of the data in order to guarantee the data subject that they will be processed fairly. 2 – The documents supporting the collection of personal data shall contain the information set down in the previous number. 3 – If the data are not collected from the data subject and except where he already has it, the controller or his representative must provide the data subject with the information set down in 1 at the time of undertaking the recording of data or, if a disclosure to third parties is envisaged, no later than the time the data are first disclosed. 4 – If data are collected on open networks the data subject shall be informed, except where he is already aware of it, that personal data relating to him may be circulated on the network without security measures and may be at risk of being seen and used by unauthorised third parties. 5 – The obligation to provide information may be waived by a legal provision or decision of the CNPD on the grounds of State security and criminal prevention or investigation and also in particular for processing for statistical purposes or for the purposes of historical or scientific research, when the provision of such information proves impossible or would involve a disproportionate effort or if recording or disclosure is expressly laid down by law. 6 – The obligation to provide information under this Article shall not apply to the processing of data carried out solely for journalistic purposes or the purpose of artistic or literary expression. 1 – The data subject has the right to obtain from the controller without constraint at reasonable intervals and without excessive delay or expense: (a) Confirmation as to whether or not data relating to him are being processed and information as to the purposes of the processing, the categories of data concerned and the recipients or categories of recipients to whom the data are disclosed; (b) Communication in an intelligible form of the data undergoing processing and of any available information as to their source; (c) Knowledge of the logic involved in any automatic processing of data concerning him; 8/20