5
Direct marketing
Section 11
Personal data may not be processed for purposes concerning direct marketing, if the registered
person gives notice in writing to the controller of personal data that he/she opposes such
processing.
Revocation of consent
Section 12
In those cases where processing of personal data is only permitted when the registered person
has provided his/her consent under Section 10, 15 or 34, the registered person is entitled to
revoke at any time consent that has been given. Further personal data about the registered
person may not subsequently be processed.
A registered person is not entitled, beyond that provided by the first paragraph and Section 11,
to oppose such processing of personal data as is permitted under this Act.
Prohibition against processing of sensitive personal data
Section 13
It is prohibited to process personal data that reveals
a) race or ethnic origin,
b) political opinions,
c) religious or philosophical beliefs, or
d) membership of a trade union.
It is also prohibited to process such personal data as concerns health or sex life.
Information of the kind referred to in the first and second paragraphs is designated as sensitive
personal data in this Act.
Exemptions from the prohibition of processing sensitive personal data
Section 14
Despite the prohibition of Section 13 it is permitted to process sensitive personal data in those
cases stated in Sections 15–19.
In Section 10 there are provisions concerning the cases in which processing of personal data is
not permitted in any case whatsoever.
Consent or publicising
Section 15
Sensitive personal data may be processed if the registered person has given his/her explicit
consent to processing or in a clear manner publicised the information.