Article 26

1.          If personal data are obtained in a manner other than that referred to in Article 25, the responsible party shall notifythe person concerned of the information, referred to in paragraphs 2 and 3, unless the latter is already aware of this:

a.       at the time when the data concerning him are recorded, or

b.      at the time when the data are intended for provision to a third party, no later than the time of the earliestprovision.

2.          The responsible party informs the person concerned of his identity and the purposes of the processing.

3.          The responsible party provides further information, to the extent necessary, in view of the nature of the data, the circumstances in which they are obtained or the use to which they are put, to ensure proper processing with due care in respect of the person concerned.

4.          The first paragraph does not apply if notification of the information to the person concerned proves to be impossible or to require disproportionate efforts. In that case, the responsible party shall record the origin of the data.

5.          The first paragraph is likewise not applicable if recording or provision is required by or pursuant to a national ordinance. In that case, the responsible party must inform the person concerned, on request, of the statutory regulation that led him to record or provide the data concerning that person.