S.L. 586.8 Art. 12Communication and modalities for exercising the rights of the data subject. 9

(1) The controller shall take reasonable steps to provide any information referred to in regulation 13 and ensure that any communication with regard to regulations 11, 14 to 18 and 31 relating to the processing is provided in a concise, intelligible and easily accessible form, using clear and plain language. The information shall be provided by any appropriate means, including by electronic means. As a general rule, the controller shall provide the information in the same form as the request.

(2) The controller shall facilitate the exercise of the rights of the data subject under regulations 11 and 14 to 18. FOR THE PURPOSES OF THE PREVENTION, INVESTIGATION, DETECTION OR PROSECUTION OF CRIMINAL OFFENCES OR THE

EXECUTION OF CRIMINAL PENALTIES

(3) The controller shall inform the data subject in writing about the follow up to his request without undue delay.

(4) The information provided under regulation 13 and any communication made or action taken pursuant to regulation 11, 14 to 18 and 31 are to be provided free of charge:

Provided that where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:

(a) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested; or

(b) refuse to act on the request.

(5) Where the controller has reasonable doubts concerning the identity of the natural person making a request referred to in regulations 14 or 16, the controller may request the provision of additional information necessary to confirm the identity of the data subject.