„The data of our employees and contractors is secure.”
Are you sure about that?
Article 21 GDPR
Right to object
1. The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her based on Article 6(1)(e) or (f), including profiling based on those provisions. The controller may no longer process such personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
P: 70
2. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that the processing is related to such direct marketing.
P: 70
3. If the data subject objects to processing for direct marketing purposes, the personal data may no longer be processed for such purposes.
P: 156
4. At the latest on the occasion of the first communication with the data subject, the data subject shall be clearly informed of the right referred to in paragraphs 1 and 2, and shall be presented clearly and separately from any other information.
5. In connection with the use of information society services and without prejudice to Directive 2002/58/EC, the data subject may exercise the right to object through automated means using technical specifications.
6. If personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1), the data subject has the right to object—on grounds relating to his or her particular situation—to the processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out in the public interest.
