The right to object applies to the processing and use of personal data, where individuals have the right to object to direct marketing, processing for scientific/historical research and statistics, legitimate interest processing, and processing in regards to the performance of a public interest or official authority task. If your processing activities falls under direct marketing, research, or any of the other categories discussed below, and your data processing is carried out online, it is important to note that you are required to have a way for individuals to object online.
The right to portability states that individuals are entitled to obtain and reuse their personal data for their own purposes. This includes the secure moving, copying and transferring of the data between IT environments, without hindrance to usability.
One of the points which the GDPR highlights in regards to personal data processing is the “right to restrict processing”, but what does this really mean? In short, this entitles any individual whose data you hold to have the right to suppress processing of this personal data. This means that you cannot further process this data at all, but you are still permitted to store the data, and retain enough information as is needed to ensure that this restriction on processing is maintained in future.