Because we're talking about an automated decision, Art. 22(1, 3) of the GDPR applies as well where: > The data subject shall have the right not to be subject t

Because we're talking about an automated decision, Art. 22(1, 3) of the GDPR applies as well where: > The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. And any exceptions still require the data controller to provide: > suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.