3) the categories of data involved; 4) the recipient or recipients to whom the data is likely to be disclosed; 5) the ability to request removal from the file; 6) the existence of a right of access to data concerning him, and to rectification of such data; 7) the period of preservallon of the processed data; 8) the possibility of any transfer of data to a third country. Article 39: Right of access Any individual whose personal data is the subject of processing may request from the data controller by way of questions: 1) information enabling them to be informed of and conlest such processing; 2) confirmation of the fact that the persona! data of which that individual is Ihe data subject is or is not being processed; 3) disclosure of persona! data of which that individual is the data subject, as weil as any available information about the origin of such data; 4) information relating to the purposes of the processes, the categories of personal data processed and the recipients or classes of recipients to whom they are disclosed. Article 40: Right to object 1) An individual is entitled, for leg~imate reasons, to object to processing of personal data of which he is the data subject. 2) Such an individual is enti~ed, on the one hand, to be informed prior to personal data of which that individual is the data subject being disclosed for the first time to a third party or used on behalf of a third party for purposes of prospecting, and on the other hand, to be given expressly the right to object, free of charge, to such disclosure or use. Article 41: Right to rectification and destruction If personal data of which an individual is the data subject are inaccurate, incomplete, questionable, outdated or prohibited from collection, use, disciosure or preservation, he is entitled to ask the data controller to have such data rectified, supplemented, updated, blocked or destroyed, as appropriate. - 15-