(70) Where personal data are processed for direct marketing purposes, the data subject should have the right to object at any time, free of charge, to such processing, initial or further profiling, if it is related to direct marketing. This right should be expressly communicated to the data subject and should be clearly and separately disclosed from any other information.
„Our employees do not keep passwords under the keyboard."
Are you sure about that?
