172 of 18 February 1992 and subsequently amended, concerning support for victims of extortion;c) by parliamentary Inquiry Committees set up as per Article 82 of the Constitution;d) by a public body other than a profit-seeking public body, where this is expressly required by a law for purposes exclusively related to currency and financial policy, the system of payments, control of brokers and credit and financial markets and protection of their stability;e) in pursuance of Section 24(1), letter f), as regards the period during which performance of the investigations by defence counsel or establishment of the legal claim might be actually and concretely prejudiced;f) by providers of publicly available electronic communications services in respect of incoming phone calls, unless this may be actually and concretely prejudicial to performance of the investigations by defence counsel as per Act no.397 of 7 December 2000;g) for reasons of justice by judicial authorities at all levels and of all instances as well as by the Higher Council of the Judiciary or other self-regulatory bodies, or else by the Ministry of Justice;h) in pursuance of Section 53, without prejudice to Act no. In the cases referred to in paragraph 2, letters a), b), d), e) and f), the Garante, also following a report submitted by the data subject, shall act as per Sections 157, 158 and 159; in the cases referred to in letters c), g) and h) of said paragraph, the Garante shall act as per Section 160.4.If the data subject is a legal person, a body or association, the relevant request shall be made by the natural person that is legally authorized thereto based on the relevant regulations or articles of association.5.
The person acting on instructions from the data subject must produce or attach a copy of either the proxy or the letter of attorney, which shall have been undersigned by the data subject in the presence of a person in charge of the processing or else shall bear the data subject's signature and be produced jointly with a copy of an ID document from the data subject, which shall not have to be certified true pursuant to law.Section 5(Subject-Matter and Scope of Application)1. This Code shall apply to the processing of personal data, including data held abroad, where the processing is performed by any entity established either in the States territory or in a place that is under the States sovereignty.2.This Code shall also apply to the processing of personal data that is performed by an entity established in the territory of a country outside the European Union, where said entity makes use in connection with the processing of equipment, whether electronic or otherwise, situated in the States territory, unless such equipment is used only for purposes of transit through the territory of the European Union.A data subject shall have the right to object, in whole or in part,a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys. The rights referred to in Section 7 may be exercised by making a request to the data controller or processor without formalities, also by the agency of a person in charge of the processing.A suitable response shall be provided to said request without delay.2.