(1) The controller must make available to data subjects the following information (whether by making the information generally available to the public or in any other way) -
(a) the identity and the contact details of the controller;
(b) where applicable, the contact details of the data protection officer (see sections 69 to 71);
(c) the purposes for which the controller processes personal data;
(d) the existence of the rights of data subjects to request from the controller -
(i) access to personal data (see section 45),
(ii) rectification of personal data (see section 46), and
(iii) erasure of personal data or the restriction of its processing (see section 47);
(e) the existence of the right to lodge a complaint with the Commissioner and the contact details of the Commissioner.
(2) The controller must also, in specific cases for the purpose of enabling the exercise of a data subject's rights under this Part, give the data subject the following -
(a) information about the legal basis f
…