Article 21 GDPR : Right to Object and Statutory Marketing Safeguards
Article 21 GDPR governs the right to object on grounds relating to particular situation against processing based on public interest or legitimate interests, and grants an absolute, unconditional right to object at any time to direct marketing without providing justification.
General Right to Object on Legitimate Grounds (Art. 21(1) GDPR)
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on public interest (Art. 6(1)(e)) or legitimate interests (Art. 6(1)(f)), including profiling based on those provisions.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Absolute Right to Object to Direct Marketing (Arts. 21(2) & 21(3) GDPR)
Where personal data are processed for direct marketing purposes, including profiling to the extent that it is related to such direct marketing, the right to object is unconditional and absolute.
Upon receipt of the objection, the controller must immediately cease all processing for marketing purposes without being permitted to invoke compelling legitimate grounds or impose fees or convoluted procedures.
Verified Official Sources
General Data Protection Regulation — EU Reference Legal Framework
Consult official source →Test en trois étapes de l'intérêt légitime : finalité légitime, nécessité du traitement, mise en balance des droits et attentes raisonnables (version 1.0, consultation publique close le 20 nov. 2024)
Consult official source →Associated Operational Micro-Tools
Methodically assess the 6 legal grounds (contract, legal obligation, consent...) and frame your legitimate interests.
See Also in the Legal Framework
Article 6 GDPR: The Six Lawful Grounds for Lawful Processing
Legal analysis of Article 6 GDPR: the six alternative legal bases for lawfulness of processing, valid consent criteria, ...
CJEU C-621/22 KNLTB: Lawfulness of Commercial Interest Under Art. 6(1)(f)
Fundamental CJEU ruling of 4 October 2024 (ECLI:EU:C:2024:858): lawful commercial interest is not excluded as a legitima...
Article 18 GDPR : Restricting Processing Pending Verification of Rights
The four statutory cases for restriction of processing under Article 18 GDPR, technical freezing of restricted data, lif...