(1) At the time when personal data are obtained, the data controller or the person authorised by it is obliged to inform the data subjects about the following:

• a) the identity of the data controller and of its representative, if any,
• b) the purpose of processing of personal data;
• c) to whom and for which purposes the processed personal data may be transferred,
• ç) the method and legal basis of collection of personal data,
• d) other rights referred to in Article 11.