Right to restriction of processing
The data subject has the right to obtain from the controller the restriction of processing if any of the following applies:
the accuracy of the personal data is contested by the data subject, for a period that allows the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that its use be restricted;
the controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise or vindication of legal claims;
the data subject has objected to the processing in accordance with Article 21(1), pending the answer to the question of whether the legitimate grounds of the controller outweigh those of the data subject.
Where processing is restricted pursuant to paragraph 1, personal data, with the exception of their storage, shall only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important reasons of public interest for the Union or for a Member State.
A data subject who has obtained a restriction on processing pursuant to paragraph 1 shall be notified by the controller before the restriction on processing is lifted.
