Right to object to the processing of personal data
Every person whose personal data is processed has a right to control the processing of his/her personal data (Article 32 paragraph 1 of the Act). It is expressed for instance by the possibility of objecting to the processing of personal data for marketing purposes or to the transfer of data to another controller.
The objection can be used when the controller justifies information processing with fulfilling the requirements referred to in Article 23 paragraph 1 points 4 and 5 of the Act that is when: the processing is necessary for the performance of tasks provided for by law carried out in the public interest or for the purpose of the legitimate interests pursued by the controllers or data recipients. This right cannot be exercised if the processing is carried out on the grounds of the consent of the data subject, specific provisions of law or the processing is necessary for the performance of a contract conducted with the controller.
In case of objection further processing of the questioned data is inadmissible. The controller is allowed to have in the filing system a name or names and a surname with a PESEL identification number or address solely for the reason of avoiding the data being used once more for the purposes to which the data subject objected (Article 32 paragraph 3 of the Act).


