The collection of data from participants shall be in compliance with Law No. 677/2001; participation is, however, subject to explicit consent to the processing of personal data as provided in the law in question.
Data in the possession of Comceh SA may be consulted, modified or deleted as specified in Section IV of the said law.

Notification to the person concerned
Wherever personal data are provided directly by the person concerned, the operator has a duty to provide the person with at least the following information:
- the name of the director and his representative, if necessary;
- the purpose of processing the data;
- additional information such as: the recipients or categories of recipients of the data; whether provision of the data is compulsory and the consequences of refusal to provide it; the existence of a right of access to alter the data and of objection and the conditions under which these can be exercised;
- any other information which must be supplied by requirement of the monitoring authorities, taking into account the specifics of the processing.

Right of access to data
Any registered person has the right obtain from the operator, on request and free of charge, on submission of one application per year, confirmation as to whether or not the data relating to him are used by the operator. If the data are used, the operator has a duty to communicate together with the confirmation:
- the purpose for which they are used, the categories of data and the recipients or categories of recipients to whom the data are sent;
- communication in an intelligible form of the data subject to processing and all information available on the origin of the data;
- information on the operating principles of the mechanism by which all automatic processing of the data relating to the registered person is carried out;
- information on the existence of a right to alter the data and right of objection and the conditions under which these can be exercised;
- information on the options to consult the register in which the processing of personal data is recorded, make a complaint to the monitoring authority and bring an action against the operator’s decisions.

The person concerned may request information from the director referred to in paragraph (1) by submitting a request made by the registered person, dated and signed. In the request, the applicant must give an address, which may be an email address, to which such communications may be sent. Such communications may also be sent by post or by courier, with a receipt of delivery to the person in question. The operator is required to provide the information requested with 15 days of receipt of the request, complying with the options available to the applicant as defined in the specific paragraphs.

Right of objection
The person concerned has the right to object at any time, for valid and legitimate reasons associated with his circumstances, to the processing of the data relating to him, except in cases where the law provides otherwise.
In the case of justified objection by the person concerned, the data may not be processed.
The person concerned has the right to object at any time, at no cost and without giving a reason, to his data being processed for marketing purposes by the promoter company, or to the data being disclosed to third parties for such purposes.

Right not to be subject to an individual decision
Any person has the right to request and obtain:
- the retraction or annulment of any decision which has a legal effect on him and was taken solely on the basis of the processing of personal data by automatic means, designed to assess aspects of his personality, professional competence, credibility, behaviour and other similar attributes;
- the re-assessment of any other decision taken in his regard and significantly affecting him, taken solely on the basis of the processing of personal data under the conditions outlined above.

With respect to the other guarantees provided for in the law, a person may be subject to decisions in the following cases:
- where the decision is taken in the context of concluding or performing a contract, provided that the request for performance or conclusion of the contract, introduced by the person in question, is satisfied or certain adequate measures are guaranteed, such as the possibility to put his point of view, and the defence of his own legitimate interest is guaranteed;
- the decision is authorised by a law which specifies the measures to ensure the defence of the legitimate interests of the person concerned.

Right of recourse to the courts
Without prejudice to the option to make a complaint to the monitoring authority, the persons concerned have the right of recourse to the courts to defend any right guaranteed by law, which has been infringed.
Any person who has suffered damage from the illegal processing of data of a personal nature may have recourse to the competent court.
The competent court must be located in the country in which the plaintiff is domiciled. The request to the competent court is exempt from stamp duty.