1 Any person who processes personal data must not unlawfully breach the data subjects' personality rights.
2 A breach of personality rights arises in particular if:
- a.
personal data are processed contrary to the principles of Articles 6 and 8;
- b.
personal data are processed contrary to the express wishes of the data subject;
- c.
sensitive personal data are disclosed to third parties.
3 In general no breach of personality rights arises if the data subject makes the personal data generally accessible and has not explicitly prohibited any processing.