(1) Where -
(a) the controller processes personal data relating to a data subject, and
(b) results produced by the processing are applied to the data subject,
the data subject is entitled to obtain from the controller, on request, knowledge of the reasoning underlying the processing.
(2) Where the data subject makes a request under subsection (1), the controller must comply with the request without undue delay.