Article 19 (...) (3) Everyone has the right to protection against unauthorized collection, publication, or other misuse of personal data.
Article 8 - Protection of personal data