18.2.2. Seek a consent from a data subject for data collection in accordance with Paragraph 8.4 of this Law or on the basis of identifying and verifying the data subject with ID card or similar document. 18.2.3. Provide the information specified in Paragraph 8.2 of this Law in order to seek a consent from the data subject, provide clear explanation on the purpose and grounds for data collection. 18.2.4. Explain the data subject about the right for refusal to give a consent for data collection and filing a complaint related to the data collection, processing, and use. 18.2.5. Explain the consequences that may arise if the data subject refuses to give a consent for data collection. 18.2.6. Explain the data subject about the decision-making based on electronic data processing without any human involvement and consequences of such decisions. 18.2.7. Verify the data against with the original copy of the data subject's ID card or similar document, or the information delivered electronically or placed in the database. 18.2.8. Provide information on data processing and use at the request of the data subject. 18.2.9. Rectify, change, erase data at the request of the data subject and notify the data subject accordingly. 18.2.10.Terminate the data processing and use after receiving the data subject's request unless the rights and legitimate interests of others are affected. 18.2.11.Provide a copy of the data in electronic form free of charge at the request of the data subject. 18.2.12. Keep records on data collection, processing, and use 18.2.13. Store information obtained in the course of data collection, processing, and use. 18.2.14. Receive and resolve the complaint of the data subject and provide a response. 18.2.15. Accept liability before the data subject on the data collection, processing and use, or before to the authorized organizations and third parties in cases provided by law. 18.3. The conditions for termination of the data processing and use specified in Sub-paragraph 18.2.10 of this Law shall not apply to the cancellation of the processing and use of data related to the data subject. 18.4. The data controller shall revoke the consent at the request of the data subject in an easy and understandable manner without causing any inconvenience. Article 19. Data Collection and Processing on a Contractual Basis 19.1. The data controller may transfer the obligation for data collection and processing to the data processor on a contractual basis. 19.2. The contract specified in Paragraph 19.1 of this Law shall include the purpose of data collection and processing, the term of the contract, the data list and the conditions for protecting the rights of the data subject. 19.3. Unless otherwise provided in the contract specified in Paragraph 19.1 of this Law, the data processor shall be prohibited from transferring his or her obligations to the others and the liabilities shall be clearly stated in the contract.