Article 10 (3) Everyone has the right to be protected from the unauthorized gathering, public revelation, or other misuse of her personal data.
Article 8 - Protection of personal data