interactive GDPR 2016/0679 EN
BG CS DA DE EL EN ES ET FI FR GA HR HU IT LV LT MT NL PL PT RO SK SL SV print pdf
- personal data
- processing
- restriction of processing
- profiling
- pseudonymisation
- filing system
- controller
- processor
- recipient
- third party
- consent
- personal data breach
- genetic data
- biometric data
- data concerning health
- main establishment
- representative
- enterprise
- group of undertakings
- binding corporate rules
- supervisory authority
- supervisory authority concerned
- cross-border processing
- relevant and reasoned objection
- information society service
- international organisation
- data 16
- subject 16
- processing 14
- personal_data 12
- shall 10
- right 8
- controller 7
- purposes 6
- restriction 5
- object 5
- where 4
- such 4
- legal 4
- exercise 4
- grounds 4
- marketing 4
- have 4
- processed 4
- longer 3
- article 3
- defence 3
- establishment 3
- which 3
- direct 3
- pursuant 3
- concerning 3
- claims 3
- time 3
- override 2
- particular 2
- based 2
- profiling 2
- unless 2
- situation 2
- legitimate 2
- reasons 2
- public 2
- relating 2
- rights 2
- interest 2
- accuracy 2
- the 2
- article 2
- from 2
- latest 1
- referred 1
- communication 1
- first 1
- paragraphs 1
- attention 1
Article 18
Right to restriction of processing
1. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
(a) | the accuracy of the personal_data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal_data; |
(b) | the processing is unlawful and the data subject opposes the erasure of the personal_data and requests the restriction of their use instead; |
(c) | the controller no longer needs the personal_data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; |
(d) | the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject. |
2. Where processing has been restricted under paragraph 1, such personal_data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
Article 21
Right to object
1. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal_data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal_data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
2. Where personal_data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal_data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
3. Where the data subject objects to processing for direct marketing purposes, the personal_data shall no longer be processed for such purposes.
4. At the latest at the time of the first communication with the data subject, the right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.
5. In the context of the use of information_society_services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
6. Where personal_data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal_data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
whereas
dal 2004 diritto e informatica