The right to object applies only in certain circumstances:
- in case of execution of works of public interest;
- when the processing of personal data refers to the execution of a public authority entrusted to a natural person;
- when processing is carried out for the legitimate interests of the controller or a third party;
- in the context of using information services; or
- for direct marketing purposes.
The right to object may be more limited in the case of processing for the purposes of scientific/historical research or for statistical purposes.
No later than the moment of the first communication, you should be explicitly notified of this right, and it should be presented in a clear way and separate from the other information provided to you.
Example:
A company has problems with the security of the entrance to its premises and, based on a legitimate interest, installs a video surveillance system.
A visitor to the company submits an objection to the processing of personal data through the video surveillance system.
If the company refuses such a request, it must provide a justification of the legitimate interest in continuing such processing.
Otherwise, the right of the visitor is considered to be violated.
