Laws · GDPR ·art-21-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
How it connects
Cited by
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- Guidelines 02/2021 on virtual voice assistants
- BELGIUM DPA: Insufficient legal basis for data processing
- Budapest Bank Zrt.: Insufficient legal basis for data processing
- Study on the secondary use of personal data in the context of scientific research
All 40
- Opinion 2/2026 on the Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision
- GC and Others v CNIL
- Google LLC v CNIL
- EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (
- Can the GPC standard eliminate consent banners in the EU?
- Garante per la protezione dei dati personali (Italy) - 487/2026
- Austrian court: university may refuse GDPR rectification of student's chosen name without
- HDPA (Greece) - 54/2024
- Personvernnemnda (Norway) - 2018-14 (15/01355)
- Austrian FAC: DPA rightly found loyalty program consent for profiling invalid under GDPR
- Statement 4/2024 on the recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR
- EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679
- EDPB Annual Report 2022
- EDPB Annual Report 2021
- Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject
- IP v Quirin Privatbank AG
- Agentsia po vpisvaniyata v OL
- Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság
- État belge v Autorité de protection des données
- UF and AB v Land Hessen
- Proceedings brought by J.M
- RW v Österreichische Post AG
- VS v Inspektor v Inspektorata kam Visshia sadeben savet
- TU and RE v Google LLC
- Ligue des droits humains ASBL v Conseil des ministres
- CJ v Court of Justice of the European Union
- HDPA (Greece) - 12/2026
- NAIH (Hungary) - NAIH-450-7-2026
- Austrian VwGH: hotel listings and user reviews on travel platform serve legitimate
- Datatilsynet ordered Lab Pharma AS to erase influencer's personal data used after
- Finnish DPA examines anti-doping organization's GDPR compliance over public suspension
- Federal Administrative Court: retention of job applicant data for potential legal claims
- European Commission v Hungary
- CNIL fines EXTIA for failing to properly handle job applicant erasure requests
- Slovenian DPA: Controller breached Art. 32, 15 and 34 GDPR over data breach and access
Related across sources
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). Jan 9, 2025 IP Address Retention Period Identification
C-579/21 Proceedings brought by J.M In Case C-579/21, the Court of Justice of the European Union ruled on a preliminary reference from the Itä-Suomen hallinto-oikeus (Administrative Court of Eastern Finland)… First Chamber Jun 22, 2023 Right of Access Personal Data Right to Restriction
C-154/21 RW v Österreichische Post AG The Court of Justice of the European Union (First Chamber), in response to a preliminary reference from the Oberster Gerichtshof (Austrian Supreme Court), interpreted Article… First Chamber Jan 12, 2023 Right of Access Personal Data Recipient
C-487/21 Österreichische Datenschutzbehörde v CRIF C-487/21 (Österreichische Datenschutzbehörde) Oct 26, 2023 Right of Access Right to Restriction Personal Data
C-136/17 GC and Others v CNIL C-136/17 (GC and Others) Sep 24, 2019 Right to be Forgotten Legitimate Interest Criminal Data