It is the right of the interested party to obtain from the data controller the limitation of the processing of their data, provided that one of the following conditions concurs:
- The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use.
- The controller no longer needs the personal data for the purposes of the processing, but the data subject does need them for the establishment, exercise or defence of legal claims.
- The data subject has objected to the processing, while verifying whether the legitimate reasons of the controller should prevail over those of the data subject.
Once the limitation of the treatment has been obtained, it will only proceed if it receives the consent of the interested party, or for the formulation of claims, or in defense of the rights of another person, or for important reasons of public interest.
In any case, prior to lifting the limitation, the person responsible for the treatment must inform the interested party.