Laws · GDPR ·art-21-par-2 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
How it connects
Cited by
- CJEU: Processing of beneficiary data not based on consent; individuals must be informed
- Belgian DPA: Legitimate interest can justify direct marketing to recent former customers
- Guidelines 3/2019 on processing of personal data through video devices
- Planet Group Spa: Insufficient legal basis for data processing
- Magazine publisher: Insufficient legal basis for data processing
All 39
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- Nationale Maatschappij der Belgische Spoorwegen: Insufficient legal basis for data processing
- Edison Energia S.p.A.: Non-compliance with general data processing principles
- Compara Facile S.r.l.: Non-compliance with general data processing principles
- Candidate for parliamentary elections: Insufficient fulfilment of data subjects rights
- Real Estate Agency: Insufficient cooperation with supervisory authority
- Realmaps S.r.l.: Insufficient legal basis for data processing
- Immobiliare Valdalpone S.r.l.: Non-compliance with general data processing principles
- Versilmagra Immobiliare di Robertelli Davide & C. S.a.s.: Non-compliance with general data processing principles
- Legal Person: Insufficient fulfilment of data subjects rights
- FT Solutions S.r.l.: Non-compliance with general data processing principles
- EDPB Annual Report 2024
- Guidelines 3/2025 on the interplay between the DSA and the GDPR
- GC and Others v CNIL
- Google LLC v CNIL
- HDPA (Greece) - 54/2024
- EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679
- EDPB Annual Report 2022
- Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- IP v Quirin Privatbank AG
- Agentsia po vpisvaniyata v OL
- Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság
- État belge v Autorité de protection des données
- UF and AB v Land Hessen
- RW v Österreichische Post AG
- TU and RE v Google LLC
- Austrian VwGH: hotel listings and user reviews on travel platform serve legitimate
- Garante per la protezione dei dati personali (Italy) - 10269624
- Federal Administrative Court: retention of job applicant data for potential legal claims
- Action Fit di Milano: Non-compliance with general data processing principles
- CNIL fines EXTIA for failing to properly handle job applicant erasure requests
- Slovenian DPA: Controller breached Art. 32, 15 and 34 GDPR over data breach and access
- Austrian Federal Administrative Court: address publisher's data transfer and Article 15
Related across sources
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). Jan 9, 2025 IP Address Retention Period Identification
C-154/21 RW v Österreichische Post AG The Court of Justice of the European Union (First Chamber), in response to a preliminary reference from the Oberster Gerichtshof (Austrian Supreme Court), interpreted Article… First Chamber Jan 12, 2023 Right of Access Personal Data Recipient
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing
C-507/17 Google LLC v CNIL C-507/17 (Google Territorial Scope) Sep 24, 2019 Territorial scope (GDPR) Right to be Forgotten Direct Marketing
C-579/21 Proceedings brought by J.M In Case C-579/21, the Court of Justice of the European Union ruled on a preliminary reference from the Itä-Suomen hallinto-oikeus (Administrative Court of Eastern Finland)… First Chamber Jun 22, 2023 Right of Access Personal Data Right to Restriction
C-487/21 Österreichische Datenschutzbehörde v CRIF C-487/21 (Österreichische Datenschutzbehörde) Oct 26, 2023 Right of Access Right to Restriction Personal Data