Navegaci贸n
RGPD > Art铆culo聽21. Derecho de oposici贸n
Descargar PDF

Art铆culo聽21 RGPD. Derecho de oposici贸n

Article 21 GDPR. Right to object

1. El interesado tendr谩 derecho a oponerse en cualquier momento, por motivos relacionados con su situaci贸n particular, a que datos personales que le conciernan sean objeto de un tratamiento basado en lo dispuesto en el art铆culo聽6, apartado聽1, letras聽e) o聽f), incluida la elaboraci贸n de perfiles sobre la base de dichas disposiciones. El responsable del tratamiento dejar谩 de tratar los datos personales, salvo que acredite motivos leg铆timos imperiosos para el tratamiento que prevalezcan sobre los intereses, los derechos y las libertades del interesado, o para la formulaci贸n, el ejercicio o la defensa de reclamaciones.

1. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Comentario de expertos
(EN) Author
Siarhei Varankevich
(EN) Siarhei Varankevich CIPP/E, CIPM, CIPT, MBA, FIP
FIP_IAPP
(EN) Co-Founder & CEO of Data Privacy Office LLC. Data Protection Trainer and Principal Consultant
Considerandos

(69) En los casos en que los datos personales puedan ser tratados l铆citamente porque el tratamiento es necesario para el cumplimiento de una misi贸n realizada en inter茅s p煤blico o en el ejercicio de poderes p煤blicos conferidos al responsable del tratamiento o por motivos de intereses leg铆timos del responsable o de un tercero, el interesado debe, sin embargo, tener derecho a oponerse al tratamiento de cualquier dato personal relativo a su situaci贸n particular. Debe ser el responsable el que demuestre que sus intereses leg铆timos imperiosos prevalecen sobre los intereses o los derechos y libertades fundamentales del interesado.

(69) Where personal data might lawfully be processed because processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or on grounds of the legitimate interests of a controller or a third party, a data subject should, nevertheless, be entitled to object to the processing of any personal data relating to his or her particular situation. It should be for the controller to demonstrate that its compelling legitimate interest overrides the interests or the fundamental rights and freedoms of the data subject.

Textos enlazados

2. Cuando el tratamiento de datos personales tenga por objeto la mercadotecnia directa, el interesado tendr谩 derecho a oponerse en todo momento al tratamiento de los datos personales que le conciernan, incluida la elaboraci贸n de perfiles en la medida en que est茅 relacionada con la citada mercadotecnia.

2. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

3. Cuando el interesado se oponga al tratamiento con fines de mercadotecnia directa, los datos personales dejar谩n de ser tratados para dichos fines.

3. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Considerandos

(70) Si los datos personales son tratados con fines de mercadotecnia directa, el interesado debe tener derecho a oponerse a dicho tratamiento, inclusive a la elaboraci贸n de perfiles en la medida en que est茅 relacionada con dicha mercadotecnia directa, ya sea con respecto a un tratamiento inicial o ulterior, y ello en cualquier momento y sin coste alguno. Dicho derecho debe comunicarse expl铆citamente al interesado y presentarse claramente y al margen de cualquier otra informaci贸n.

(70) Where personal data are processed for the purposes of direct marketing, the data subject should have the right to object to such processing, including profiling to the extent that it is related to such direct marketing, whether with regard to initial or further processing, at any time and free of charge. That right should be explicitly brought to the attention of the data subject and presented clearly and separately from any other information.

4. A m谩s tardar en el momento de la primera comunicaci贸n con el interesado, el derecho indicado en los apartados聽1 y聽2 ser谩 mencionado expl铆citamente al interesado y ser谩 presentado claramente y al margen de cualquier otra informaci贸n.

4. At the latest at the time of the first communication with the data subject, the right referred to in paragraphs聽1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.

ISO 27701

(EN) ISO/IEC 27701, adopted in 2019, added additional ISO/IEC 27002 guidance for PII controllers.

Here is the relevant paragraphs to article 21(4) GDPR:

7.3.2 Determining information for PII principals

Control

The organization should determine and document the information to be provided to PII principals regarding the processing of their PII and the timing of such a provision.

Implementation guidance

The organization should determine the legal, regulatory and/or business requirements for when information is to be provided to the PII principal (e.g. prior to processing, within a certain time from when it is requested, etc.) and for the type of information to be provided.

 


para acceder al texto completo

5. En el contexto de la utilizaci贸n de servicios de la sociedad de la informaci贸n, y no obstante lo dispuesto en la Directiva聽2002/58/CE, el interesado podr谩 ejercer su derecho a oponerse por medios automatizados que apliquen especificaciones t茅cnicas.

5. In the context of the use of information society services, and notwithstanding Directive聽2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.

6. Cuando los datos personales se traten con fines de investigaci贸n cient铆fica o hist贸rica o fines estad铆sticos de conformidad con el art铆culo聽89, apartado聽1, el interesado tendr谩 derecho, por motivos relacionados con su situaci贸n particular, a oponerse al tratamiento de datos personales que le conciernan, salvo que sea necesario para el cumplimiento de una misi贸n realizada por razones de inter茅s p煤blico.

6. Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article聽89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Textos enlazados
Comentario de expertos ISO 27701 Considerandos Ley de Directrices y caso Deja un comentario
Comentario de expertos

(EN)

Data Subject Request Letter Sample

Concern: Request to stop processing my personal data

Dear Madam, Dear Sir,

You have data concerning me that I am asking you to stop processing鈥


para acceder al texto completo

(EN) Author
Louis-Philippe Gratton
(EN) Louis-Philippe Gratton PhD, LLM
(EN) Privacy Expert
ISO 27701

(EN) ISO/IEC 27701, adopted in 2019, added additional ISO/IEC 27002 guidance for PII controllers.

Here is the relevant paragraph to article 21 GDPR:

7.3.5 Providing mechanism to object to PII processing

Control

The organization should provide a mechanism for PII principals to object to the processing of their PII.

Implementation guidance

Some jurisdictions provide PII principals with a right to object to the processing of their PII.


para acceder al texto completo

Considerandos

(69) En los casos en que los datos personales puedan ser tratados l铆citamente porque el tratamiento es necesario para el cumplimiento de una misi贸n realizada en inter茅s p煤blico o en el ejercicio de poderes p煤blicos conferidos al responsable del tratamiento o por motivos de intereses leg铆timos del responsable o de un tercero, el interesado debe, sin embargo, tener derecho a oponerse al tratamiento de cualquier dato personal relativo a su situaci贸n particular. Debe ser el responsable el que demuestre que sus intereses leg铆timos imperiosos prevalecen sobre los intereses o los derechos y libertades fundamentales del interesado.

(69) Where personal data might lawfully be processed because processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or on grounds of the legitimate interests of a controller or a third party, a data subject should, nevertheless, be entitled to object to the processing of any personal data relating to his or her particular situation. It should be for the controller to demonstrate that its compelling legitimate interest overrides the interests or the fundamental rights and freedoms of the data subject.

(70) Si los datos personales son tratados con fines de mercadotecnia directa, el interesado debe tener derecho a oponerse a dicho tratamiento, inclusive a la elaboraci贸n de perfiles en la medida en que est茅 relacionada con dicha mercadotecnia directa, ya sea con respecto a un tratamiento inicial o ulterior, y ello en cualquier momento y sin coste alguno. Dicho derecho debe comunicarse expl铆citamente al interesado y presentarse claramente y al margen de cualquier otra informaci贸n.

(70) Where personal data are processed for the purposes of direct marketing, the data subject should have the right to object to such processing, including profiling to the extent that it is related to such direct marketing, whether with regard to initial or further processing, at any time and free of charge. That right should be explicitly brought to the attention of the data subject and presented clearly and separately from any other information.

Ley de Directrices y caso Deja un comentario
[js-disqus]