1. Processing shall be lawful only if and to the extent that at least one of the following applies:
|
(a)
|
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body;
|
|
(b)
|
processing is necessary for compliance with a legal obligation to which the controller is subject;
|
|
(c)
|
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
|
|
(d)
|
the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
|
|
(e)
|
processing is necessary in order to protect the vital interests of the data subject or of another natural person.
|