[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 651 ACT (c) where applicable, information about the categories of recipients of the personal data, including recipients in other countries or international organisations; (d) such further information as may be necessary to enable the exercise of the data subject’s rights under this Part. Right to access data 27.(1) A data subject shall have the right to obtain from a data controller — (a) confirmation whether the data controller is processing the data subject's personal information; (b) communication of the personal data undergoing processing and of any available information as to its origin; (c) the recipients or categories of recipients to whom the personal data has been disclosed, including recipients or categories of recipients in third countries or international organisations; (d) a list of data recipients that accessed the data in the past 6 months since the date of the request; (e) the purposes for such data processing; (f) the purposes of and legal basis for the processing; (g) the categories of personal data concerned; (h) the period for which it is envisaged that the personal data will be stored or, where that is not possible, the criteria used to determine that period. (2) A data subject shall have the right to obtain the following from the data controller — (a) rectification or correction of personal data, cancellation,