(o) (2) (3) (4) (5) any necessary additional information in order to ensure fair and transparent processing. Apart from the information listed under sub-Article (1), where personal data have not been obtained from the data subject, the data controller shall provide the data subject with the following information: (a) the categories of personal data obtained; and (b) the source of the personal data. Where personal data relating to a data subject are collected from the data subject, the data controller shall provide the data subject with all of the information listed in subArticle (1) of this Article, at the time when personal data are obtained. Where personal data relating to the data subject are not collected from the data subject, the data controller shall provide the data subject the information referred to in subArticle (1) and (2) of this Article: (a) within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data are processed; (b) if the personal data are to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or (c) if a disclosure to another recipient is envisaged, at the latest when the personal data are first disclosed. Where the data controller intends to further process the personal data for a purpose other than that for which the personal data were collected or obtained, as the case may be, he shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information. 35. Right of Access (1) A data subject shall have a right to obtain, on request, at reasonable intervals, free of charge, and without excessive delay: (a) confirmation of the processing of personal data relating to him; (b) the communication in an intelligible form of the data processed; (c) all available information on their origin; (d) on the period for which the data will be stored; and (e) any other information that the data controller is required to provide in order to ensure the transparency of processing in accordance with Article 34 of this Proclamation. (2) A data subject shall have the right to obtain the information listed in sub-Article (1) of this Article, based on his preference, in an electronic or hard copy format. 36. (1) Exception to the Right of Access The data controller may refuse to disclose personal data to the individual to whom the data relates where: (a) the disclosure would constitute an unjustified invasion of another individual’s personal privacy; 17