§ 56 BDSG
Notification of data subjects
(1)The controller shall notify the data subject of the conditions for the processing of his or her personal data and of his or her rights in general form and in accessible language. The controller shall in particular inform the data subject of 1 the purposes of the processing to which the personal data are subjected,; 2 the right to lodge a complaint with the Federal Commissioner and how the Federal Commissioner can be reached and; 3 the right of access and of rectification and erasure as well as restriction of processing.
(2)In addition to the information referred to in Subsection (1), the controller shall in certain cases provide the data subject with the following additional information to enable the exercise of his or her rights: 1 the legal basis for the processing,; 2 the period for which the personal data will be stored, or where that is not possible, the criteria used to determine that period,; 3 where applicable, the recipients or categories of recipients of the personal data, including in third countries or international organisations,; 4 where necessary, additional information, in particular where the personal data are collected without the knowledge of the data subject.
(3)The controller may delay, restrict or omit the provision of information pursuant to Subsection (2) to the extent that and for as long as such a measure constitutes a necessary and proportionate measure in a democratic society with due regard for the fundamental rights and the legitimate interests of the natural person concerned in order to 1 avoid obstructing official or legal inquiries, investigations or procedures,; 2 avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties,; 3 protect public security,; 4 protect national security or; 5 protect the rights and freedoms of others.
(4)The controller shall document the factual or legal grounds on which the decision is based. The documentation shall be made available to the Federal Commissioner upon request.