Article 13a(1)

1. Where personal data relating to a data subject are collected, the controller shall provide the data subject with the following particulars before providing information pursuant to Article 14:

• (a) whether personal data are collected beyond the minimum necessary for each specific purpose of the processing;
• (b) whether personal data are retained beyond the minimum necessary for each specific purpose of the processing;
• (c) whether personal data are processed for purposes other than the purposes for which they were collected;
• (d) whether personal data are disseminated to commercial third parties;
• (e) whether personal data are sold or rented out;
• (f) whether personal data are retained in encrypted form.

Article 13a(2)

2. The particulars referred to in paragraph 1 shall be presented pursuant to Annex X in an aligned tabular format, using text and symbols, in the following three columns:

• (a) the first column depicts graphical forms symbolising those particulars;
• (b) the second column contains essential information describing those particulars;
• (c) the third column depicts graphical forms indicating whether a specific particular is met.

Article 13a(3)

3. The information referred to in paragraphs 1 and 2 shall be presented in an easily visible and clearly legible way and shall appear in a language easily understood by the consumers of the Member States to whom the information is provided. Where the particulars are presented electronically, they shall be machine readable.

Article 13a(4)

4. Additional particulars shall not be provided. Detailed explanations or further remarks regarding the particulars referred to in paragraph 1 may be provided together with the other information requirements pursuant to Article 14.

Article 13a(5)

5. The Commission shall be empowered to adopt, after requesting an opinion of the European Data Protection Board, delegated acts in accordance with Article 86 for the purpose of further specifying the particulars referred to in paragraph 1 and their presentation as referred to in paragraph 2 and in Annex 1.

[Source: October 2013]

Annex 1 - Presentation of the particulars referred in Article 13a

Annex 1(1)

1. Having regard to the proportions referred to in point 6, particulars shall be provided as follows:

Annex 1(2)

2. The following words in the rows in the second column of the table in point 1, entitled "ESSENTIAL INFORMATION", shall be formatted as bold:

• (a) the word "collected" in the first row of the second column;
• (b) the word "retained" in the second row of the second column;
• (c) the word "processed" in the third row of the second column;
• (d) the word "sold and rented out" in the fifth row of the second column;
• (e) the word "disseminated" in the fourth row of thesecond column;
• (f) the word "unencrypted" in the sixth row of the second column.

Annex 1(3)

3. Having regard to the proportions referred to in point 6, the rows in the third column of the table in point 1, entitled "FULFILLED", shall be completed with one of thefollowing two graphical forms in accordance with the conditions laid down under point 4:

• (a)
  
• (b)
  

Annex 1(4)

4.

• (a) If no personal data are collected beyond the minimum necessary for each specific purpose of the processing, the first row of the third column of the table in point 1 shall entail the graphical form referred to in point 3a.
• (b) If personal data are collected beyond the minimum necessary for each specific purpose of the processing, the first row of the third column of the table in point 1 shall entail the graphical form referred to in point 3b.
• (c) If no personal data are retained beyond the minimum necessary for each specific purpose of the processing, the second row of the third column of the table in point 1 shall entail the graphical form referred to in point 3a.
• (d) If personal data are retained beyond the minimum necessary for each specific purpose of the processing, the second row of the third column of the table in point 1 shall entail the graphical form referred to in point 3b.
• (e) If no personal data are processed for purposes other than the purposes for which they were collected, the third row of the third column of the table in point 1 shall entail the graphical form referred to in point 3a.
• (f) If personal data are processed for purposes other than the purposes for which they were collected, the third row of the third column of the table in point 1 shall entail the graphical form referred to in point 3b.
• (g) If no personal data are disseminated to commercial third parties, the fourth row of the third column of the table in point 1 shall entail the graphical form referred to in point 3a.
• (h) If personal data are disseminated to commercial third parties, the fourth row of the third column of the table in point 1 shall entail the graphical form referred to in point 3b.
• (i) If no personal data are sold or rented out, the fifth row of the third column of the table in point 1 shall entail the graphical form referred to in point 3a.
• (j) If personal data are sold or rented out, the fifth row of the third column of the table in point 1 shall entail the graphical form referred to in point 3b.
• (k) If no personal data are retained in unencrypted form, the sixth row of the third column of the table in point 1 shall entail the graphical form referred to in point 3a.
• (l) If personal data are retained in unencrypted form, the sixth row of the third column of the table in point 1 shall entail the graphical form referred to in point 3b.

Annex 1(5)

5. The reference colours of the graphical forms in point 1 in Pantone are Black Pantone No 7547 and Red Pantone No 485. The reference colour of the graphical form in point 3a in Pantone is Green Pantone No 370. The reference colour of the graphical form in point 3b in Pantone is Red Pantone No 485.

Annex 1(6)

6. The proportions given in the following graduated drawing shall be respected, even where the table is reduced or enlarged:

[Source: October 2013]