Federal Act
on Data Protection
(Data Protection Act, FADP)

¹ Any per­son may re­quest in­form­a­tion from the con­trol­ler on wheth­er per­son­al data re­lat­ing to them is be­ing pro­cessed.

² The data sub­ject shall re­ceive the in­form­a­tion re­quired to be able to ex­er­cise their rights un­der this Act and to guar­an­tee trans­par­ent data pro­cessing. In every case, they are en­titled to the fol­low­ing in­form­a­tion:

a.

the iden­tity and the con­tact de­tails of the con­trol­ler;

b.

the pro­cessed per­son­al data as such;

c.

the pur­pose of pro­cessing;

d.

the re­ten­tion peri­od for the per­son­al data or, if this is not pos­sible, the cri­ter­ia for de­term­in­ing this peri­od;

e.

the avail­able in­form­a­tion about the source of the per­son­al data, if it has not been col­lec­ted from the data sub­ject;

f.

if ap­plic­able, wheth­er an auto­mated in­di­vidu­al de­cision has been taken and the lo­gic be­hind the de­cision;

g.

if ap­plic­able, the re­cip­i­ents or the cat­egor­ies of re­cip­i­ents to which per­son­al data is dis­closed, as well as the in­form­a­tion spe­cified in Art­icle 19 para­graph 4.

³ The data sub­ject may con­sent to hav­ing per­son­al data re­lat­ing to their health com­mu­nic­ated by a health pro­fes­sion of their choice.

⁴ If the con­trol­ler ar­ranges for per­son­al data to be pro­cessed by a pro­cessor, it re­mains un­der a duty to provide in­form­a­tion.

⁵ No one may waive their right to in­form­a­tion in ad­vance.

⁶ The con­trol­ler must provide in­form­a­tion free of charge. The Fed­er­al Coun­cil may provide for ex­cep­tions, in par­tic­u­lar if the ef­fort re­quired is dis­pro­por­tion­ate.

⁷ The in­form­a­tion shall in gen­er­al be provided with­in 30 days.