HURBAIN v. BELGIUM JUDGMENT
(c) the data subject objects to the processing pursuant to Article 21(1) and there are
no overriding legitimate grounds for the processing, or the data subject objects to the
processing pursuant to Article 21(2);
(d) the personal data have been unlawfully processed;
(e) the personal data have to be erased for compliance with a legal obligation in Union
or Member State law to which the controller is subject;
(f) the personal data have been collected in relation to the offer of information society
services referred to in Article 8(1).
2. Where the controller has made the personal data public and is obliged pursuant to
paragraph 1 to erase the personal data, the controller, taking account of available
technology and the cost of implementation, shall take reasonable steps, including
technical measures, to inform controllers which are processing the personal data that
the data subject has requested the erasure by such controllers of any links to, or copy or
replication of, those personal data.
3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:
(a) for exercising the right of freedom of expression and information;
...
(d) for archiving purposes in the public interest, scientific or historical research
purposes or statistical purposes in accordance with Article 89(1) in so far as the right
referred to in paragraph 1 is likely to render impossible or seriously impair the
achievement of the objectives of that processing;
...”
Article 22
Automated individual decision-making, including profiling
“1. The data subject shall have the right not to be subject to a decision based solely
on automated processing, including profiling, which produces legal effects concerning
him or her or similarly significantly affects him or her.
2. Paragraph 1 shall not apply if the decision:
(a) is necessary for entering into, or performance of, a contract between the data
subject and a data controller;
(b) is authorised by Union or Member State law to which the controller is subject and
which also lays down suitable measures to safeguard the data subject’s rights and
freedoms and legitimate interests; or
(c) is based on the data subject’s explicit consent.
...”
Article 85
Processing and freedom of expression and information
“1. Member States shall by law reconcile the right to the protection of personal data
pursuant to this Regulation with the right to freedom of expression and information,
including processing for journalistic purposes and the purposes of academic, artistic or
literary expression.
26