Removing my personal data ex-employer (RGPD/GDPR)
<p>I work and live in France. I worked for a company last year but I quit working there months ago. Since I left, they still have not have removed some data accessible on the internet, like my first name/Surname, job Title and the mailing address I had. They are at the end of some pdf document as a contact. This is not a big concern, but I would rather make those disappear. I really don't like to be exposed on internet. I already emailed them few times, they answered "Yeah, will do it!" but then did nothing, all the data is still on their website.</p>

<ol>
<li>Can they publish this kind of data?</li>
<li>Can I force them to remove it using RGPD (also called GDPR)?</li>
</ol>

<ol>
<li>A controller may have a good reason to publish or otherwise process information about a person even where that person has made a lawful request for erasure, restriction of processing, etc. However, the continued processing must itself be lawful. The many permutations do not permit a clear-cut answer to this question.</li>
<li>You have the right to request that personal data be erased (<a href="https://gdpr-info.eu/art-17-gdpr/" rel="nofollow noreferrer">Art. 17</a>), and to object to its processing (<a href="https://gdpr-info.eu/art-21-gdpr/" rel="nofollow noreferrer">Art. 21</a>). As per the <a href="https://law.stackexchange.com/a/36219/18215">answer</a> <a href="https://law.stackexchange.com/users/18215/wimh">wimh</a> linked to in their <a href="https://law.stackexchange.com/questions/38749/removing-my-personal-data-ex-employer-rgpd-gpdr#comment70604_38749">comment</a>, if the request is not complied with you have a judicial remedy by which to potentially &quot;force&quot; the controller to remove your personal data, and can make a complaint to <a href="https://www.cnil.fr/" rel="nofollow noreferrer">the supervisory authority</a> at any time.</li>
</ol>

gdpr european-union data-protection france