4.4. Right of deletion
According to article 17 of Regulation (EU) 2016/679.
“ Right to erasure.
- The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay. The controller shall be obliged to erase personal data without undue delay where one of the following grounds applies:
- The personal data are no longer necessary for the purposes for which they were collected or processed.
- the data subject withdraws consent on which the processing is based in accordance with point (a) of Article 6(1) or point (a) of Article 9(2) and there is no other legal basis for the processing;
- the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
- The personal data have been processed unlawfully.
- the personal data must be erased for compliance with a legal obligation to which the controller is subject by Union or Member State law;
- the personal data have been obtained in relation to the offer of information society services referred to in Article 8, paragraph 1.”