1. managing is unlawful;
2. requested by the person concerned;
3. incomplete or incorrect – and this condition can not be legally remedied, provided that the deletion is not excluded by law;
4. the purpose of data management has ceased or the statutory deadline for data storage has expired;
5. it is ordered by the court or the Authority.
Correction, blocking, marking and deletion of the personal data of the person concerned and all those who have previously been transferred to data management have to be notified. Notification may be omitted if it does not prejudice the legitimate interest of the data concerned for the purpose of data handling.
If the Data Handler fails to comply with the concerned correction, lock or deletion request, within 30 days of receipt of the request, he or she communicates, in writing or with the consent of the person concerned, by electronic means the factual and legal grounds for rejecting the request for rectification, blocking or cancellation. In case of refusal of an application for rectification, cancellation or blocking, the Data Controller informs the person concerned of the court’s remedy and the possibility of appeal to the Authority.