interactive GDPR 2016/0679 EN
BG CS DA DE EL EN ES ET FI FR GA HR HU IT LV LT MT NL PL PT RO SK SL SV print pdf
- personal data
- processing
- restriction of processing
- profiling
- pseudonymisation
- filing system
- controller
- processor
- recipient
- third party
- consent
- personal data breach
- genetic data
- biometric data
- data concerning health
- main establishment
- representative
- enterprise
- group of undertakings
- binding corporate rules
- supervisory authority
- supervisory authority concerned
- cross-border processing
- relevant and reasoned objection
- information society service
- international organisation
- subject 22
- data 22
- processing 17
- controller 15
- personal_data 11
- restriction 10
- shall 9
- legal 6
- rights 4
- pursuant 4
- accuracy 4
- establishment 4
- right 4
- article 4
- claims 4
- exercise 4
- defence 4
- under 3
- such 3
- paragraph 3
- purposes 3
- where 3
- longer 3
- enabling 3
- identification 3
- another 2
- additional 2
- natural 2
- person 2
- reasons 2
- information 2
- protection 2
- cases 2
- articles 2
- purpose 2
- identify 2
- consent 2
- important 2
- public 2
- union 2
- before 2
- member state 2
- informed 2
- a 2
- lifted 2
- which 2
- paragraph 2
- interest 2
- require 2
- obtained 2
Article 18
Right to restriction of processing
1. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
(a) | the accuracy of the personal_data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal_data; |
(b) | the processing is unlawful and the data subject opposes the erasure of the personal_data and requests the restriction of their use instead; |
(c) | the controller no longer needs the personal_data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; |
(d) | the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject. |
2. Where processing has been restricted under paragraph 1, such personal_data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
Article 11
Processing which does not require identification
1. If the purposes for which a controller processes personal_data do not or do no longer require the identification of a data subject by the controller, the controller shall not be obliged to maintain, acquire or process additional information in order to identify the data subject for the sole purpose of complying with this Regulation.
2. Where, in cases referred to in paragraph 1 of this Article, the controller is able to demonstrate that it is not in a position to identify the data subject, the controller shall inform the data subject accordingly, if possible. In such cases, Articles 15 to 20 shall not apply except where the data subject, for the purpose of exercising his or her rights under those articles, provides additional information enabling his or her identification.
CHAPTER III
Rights of the data subject
Article 18
Right to restriction of processing
1. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
(a) | the accuracy of the personal_data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal_data; |
(b) | the processing is unlawful and the data subject opposes the erasure of the personal_data and requests the restriction of their use instead; |
(c) | the controller no longer needs the personal_data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; |
(d) | the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject. |
2. Where processing has been restricted under paragraph 1, such personal_data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
whereas
dal 2004 diritto e informatica