The right to objection means that individuals have the right to object to the processing of their personal data. This is not an absolute right which means that the controllers only is forced to fulfil the data subjects request if the request meets the requirements in Art. 21 GDPR.
The right to object can only be used if the processing is based on point (e) or (f) of Article 6(1) or that the processing consist profiling of data subject. After a request that fulfils these demands, the controller needs to stop their processing if they can not show that their processing overrides the data subjects interests, rights and freedoms.
When a controller process data for direct marketing purposes, the right to object is absolute, which means that the data subjects always have the right to object to this processing. When the data subject object to this type of processing, the controller needs to stop the processing of the data.
Do your legitimate interest assessments stand up to scrutiny?
Connect with leading experts to secure your documentation before an audit. Ask for a second opinion from our experts. Track record with leading European startup, mid-size companies and listed global enterprises.
Get a quote today from the business law firm Sharp Cookie Advisors