Right to object

The data subject's right to object under Article 21(1) of Regulation (EU) 2016/679 does not exist where 1. a compelling public interest in the processing exists that outweighs the data subject's interests, or 2. a statutory provision obliges the BSI to carry out the processing. In addition to Article 21(1), second sentence of Regulation (EU) 2016/679, the BSI may further process the personal data until it has examined whether compelling grounds worthy of protection exist for the processing that outweigh the interests, rights and freedoms of the data subject.