Abstract Data protection laws, including the European Union General Data Protection Regulation, regulate aspects of online personalization. However, the data protection lens is too narrow to analyze personalization. To define conditions for personalization, we should understand data protection in its larger fundamental rights context, starting with the closely connected right to privacy. If the right to privacy is considered along with other European fundamental rights that protect information and communication flows, namely, communications confidentiality; the right to receive information; and freedom of expression, opinion, and thought, these rights are observed to enable what I call a “personal information sphere” for each person. This notion highlights how privacy interferences affect other fundamental rights. The personal information sphere is grounded in European case law and is thus not just an academic affair. The essence of the personal information sphere is control, yet with a different meaning than mere control as guaranteed by data protection law. The personal information sphere is about people controlling how they situate themselves in information and communication networks. It follows that, to respect privacy and related rights, online personalization providers should actively involve users in the personalization process and enable them to use personalization for personal goals.

中文翻译：

---

个人信息领域：隐私和相关信息和通信权利的综合方法

摘要 数据保护法，包括欧盟通用数据保护条例，规范了在线个性化的各个方面。但是，数据保护的视角太窄，无法分析个性化。为了定义个性化的条件，我们应该在更大的基本权利背景下理解数据保护，从密切相关的隐私权开始。如果将隐私权与保护信息和通信流的其他欧洲基本权利（即通信机密性）一起考虑；获得信息的权利；以及表达、意见和思想的自由，这些权利被遵守以实现我所说的每个人的“个人信息领域”。这个概念强调了隐私干扰如何影响其他基本权利。个人信息领域以欧洲判例法为基础，因此不仅仅是学术事务。个人信息领域的本质是控制，但其含义与数据保护法所保证的单纯控制不同。个人信息领域是关于人们控制他们如何在信息和通信网络中定位自己。因此，为了尊重隐私和相关权利，在线个性化提供商应积极让用户参与个性化过程，并使他们能够将个性化用于个人目标。个人信息领域是关于人们控制他们如何在信息和通信网络中定位自己。因此，为了尊重隐私和相关权利，在线个性化提供商应积极让用户参与个性化过程，并使他们能够将个性化用于个人目标。个人信息领域是关于人们控制他们如何在信息和通信网络中定位自己。因此，为了尊重隐私和相关权利，在线个性化提供商应积极让用户参与个性化过程，并使他们能够将个性化用于个人目标。