Not named in the source

What happened

The Belgian DPA held that a controller can rely on legitimate interest as a legal basis to send former customers direct marketing if the relationship ended 'not that long ago' and the data subject did not object to this processing.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 6Lawfulness of processing6(1)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →
• Art. 15Right of access by the data subjectRead →
• Art. 21Right to object21(2) · 21(3)Read →

• Data subject rights
• Transparency
• Unlawful processing