Right to object

The right to object is established by Article 21 of the General Data Protection Regulation (GDPR) and offers data subjects the opportunity to oppose the processing of their personal data, meaning they can request the cessation of the processing of their data under specific circumstances.

There are two main situations in which a data subject can exercise the right to object:

1. Processing based on legitimate interest or public interest: The data subject has the right to object to the processing of their personal data when it is based on the data controller’s legitimate interest or is necessary for the performance of a task carried out in the public interest. The controller must stop processing the data unless they can demonstrate compelling legitimate grounds that override the interests, rights, and freedoms of the data subject or if the processing is necessary for the establishment, exercise, or defence of legal claims.
2. Direct marketing: The data subject has an absolute right to object to the processing of their personal data for direct marketing purposes, including profiling related to marketing. In the event of an objection, the controller must immediately stop using the data for marketing purposes.

The right to object represents an important safeguard for protecting the privacy of data subjects, allowing them to limit the use of their data in contexts that may not align with their expectations or rights. The GDPR requires that the privacy notice includes clear information on how data subjects can exercise their right to object and that simple and free means are provided to submit such requests.

Trust Guardian’s approach to the right to object

Trust Guardian facilitates the management of objections through the Rights Management module, which collects and centralizes all rights requests, streamlining their handling from a business perspective and monitoring response times.

Through myPrivacy platform, data subjects can exercise their right to object easily, ensuring that every request is accurately tracked and documented.