Acts 2017 (b) the purpose for which the data are being collected; (c) the intended recipients of the data; 489 (d) whether or not the supply of the data by that data subject is voluntary or mandatory; (e) the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; (f) the existence of the right to request from the controller access to and rectification, restriction or erasure of personal data concerning the data subject or to object to the processing; (g) the existence of automated decision making, including profiling, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; (h) the period for which the personal data shall be stored; (i) the right to lodge a complaint with the Commissioner; (j) where applicable, that the controller intends to transfer personal data to another country and on the level of suitable protection afforded by that country; and (k) any further information necessary to guarantee fair processing in respect of the data subject’s personal data, having regard to the specific circumstances in which the data are collected. (3) where – A controller shall not be required to comply with subsection (2) (a) the data subject already has the information referred to in subsections (1) and (2); or (b) the data are not collected from the data subject and – (i) the provision of such information proves impossible or would involve a disproportionate effort; or