Right to erasure (right to be forgotten)

Standard form for exercising the right to erasure (right to be forgotten) (Catalan version available)

The data subject has the right to obtain the erasure of personal data concerning him or her (“right to be forgotten”) when

• The personal data are no longer necessary in relation to the purposes for which they were collected.
• The data subject withdraws consent on which the processing was based.
• The data subject objects to the processing.
• The personal data have been unlawfully processed.
• The personal data have to be erased for compliance with a legal obligation.
• The personal data have been collected in relation to the offer of information society services addressed to children under 16 years of age.

Where the controller has made the personal data public and is obliged to erase them, the controller should take reasonable steps to inform other controllers which are processing the personal data that the data subject has requested their erasure.

The controller should communicate the erasure to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller should inform the data subject about those recipients if the data subject so requests.

The right to erasure does not apply to the extent that processing is necessary:

• For exercising the right of freedom of expression and information.
• For compliance with a legal obligation.
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
• For the establishment, exercise or defence of legal claims.