Article 5 Right of information in data collection (Ley Orgánica 15/1999).
1. The persons to whom personal data is requested should be previously informed explicitly, precisely and unequivocally:
a) The existence of a file or processing of personal data, the purpose of collecting the data and the recipients of the information.
b) The obligatory or optional nature of their response to the questions put to them character.
c) The consequences of obtaining data or the refusal to supply.
d) The possibility of exercising rights of access, rectification, cancellation and opposition.
e) The identity and address of the controller or, where appropriate, his representante.Cuando the controller is not established on the territory of the European Union and use in the treatment means situated in Spanish territory shall designate, unless such equipment is used for purposes of processing, a representative in Spain, without prejudice to legal actions which could be initiated against the controller himself.
2. When questionnaires or other forms used for collection, given in the same, in a clearly legible form warnings to the previous paragraph.
3. the information referred to in subparagraphs b is not necessary), c) and d) of paragraph 1 if the content it is clear from the nature of the personal data requested or the circumstances in which they are sought.
4. When the personal data have not been obtained from him, he shall be informed explicitly, precisely and unequivocally by the controller or his representative, within three months from the Registry data, unless it has already been reported previously, the content of the treatment, the origin of the data, and as provided in the letters a), d) and e) of paragraph 1 of this Article.
5. shall not apply the provisions of the preceding paragraph, where a statute expressly provides, when treatment has historical, statistical or scientific purposes, or when the information proves impossible or would involve disproportionate effort, as determined by the Agency for Protection data or equivalent regional body, considering the number of subjects, the age of the data, and any compensatory measures.
Nor will govern the provisions of the preceding paragraph when the data come from public sources and are intended for the activity of advertising or marketing purposes, in which case, each communication sent to the person concerned will be informed of the source of data and the identity of the controller and of his rights.