FantasticSearch

1. Targeting techniques or ad-delivery techniques that involve the processing of personal data in the context of online political advertising shall be permitted only when the following conditions are fulfilled:

(a) the controller collected the personal data from the data subject;

(b) the data subject has provided explicit consent within the meaning of Regulations (EU) 2016/679 and (EU) 2018/1725 to the processing of personal data separately for the purpose of political advertising; and (c) those techniques do not involve ‘profiling’ as defined in Article 4, point 4, of Regulation (EU) 2016/679 and in Article 3, point 5, of Regulation (EU) 2018/1725 using special categories of personal data referred to in Article 9(1) of Regulation (EU) 2016/679 and in Article 10(1) of Regulation (EU) 2018/1725.

2. In the context of political advertising, targeting techniques or ad-delivery techniques that involve the processing of the personal data of a data subject that is known by the controller with reasonable certainty to be at least one year under the voting age established by national rules are prohibited. Compliance with the obligations set out in this paragraph shall not oblige the controller to process additional personal data in order to assess whether the data subject is one year under the voting age.

3. This Article shall not apply to communications of any political party, foundation, association or any other non-profit body, to their members and former members or to communications, such as newsletters, linked to their political activities, as long as those communications are solely based on subscription data and therefore strictly limited to their members, former members or subscribers and are based on personal data provided by them and do not involve processing of personal data to target or otherwise further select the recipients and the messages they receive.

4. For the purposes of implementing the requirements of Regulations (EU) 2016/679 and (EU) 2018/1725 on providing explicit consent, as well as on withdrawing it once given, controllers shall make sure that:

(a) the data subject is not requested to consent if he or she has already indicated by automated means that he or she does not consent to data processing for political advertising purposes, unless the request is justified by a substantial change of circumstances;

(b) the data subject who does not give his or her consent is to be offered an equivalent alternative for using the online service without receiving political advertising.