Under article 21 of the GDPR, individuals have the right to object to organisations processing their personal data. This effectively means that organisations can be stopped or prevented from using an individual’s data.
The right to object depends on the organisation’s purpose and lawful grounds for processing and an objection can typically only be made if data is used for:
direct marketing purposes
statistical purposes or scientific or historical research
tasks carried out that are in the public interest
the exercise of official authority
the organisation’s legitimate interest
For more information, read Objecting to the use of personal data.