Ti=Article 6 - Lawfulness of {_processing}
1.0.sec={_Processing} shall be lawful only if and to the extent that at least one of the following applies:
1.1.sec=the {_data_subject} has given {_consent} to the {_processing} of his or her {_personal_data} for one or more specific purposes;
1.2.sec={_processing} is necessary for the performance of a contract to which the {_data_subject} is party or in order to take steps at the request of the {_data_subject} prior to entering into a contract;
1.3.sec={_processing} is necessary for compliance with a legal obligation to which the {_controller} is subject;
1.4.sec={_processing} is necessary in order to protect the vital interests of the {_data_subject} or of another {_natural_person};
1.5.sec={_processing} is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the {_controller};
1.6.sec={_processing} is necessary for the purposes of the legitimate interests pursued by the {_controller} or by a {_third_party}, except where such interests are overridden by the interests or fundamental rights and freedoms of the {_data_subject} which require protection of {_personal_data}, in particular where the {_data_subject} is a {_child}.
1.00.sec=Point (f) of the first subparagraph shall not apply to {_processing} carried out by public authorities in the performance of their tasks.
1.=[G/Z/ol-a/s6]
2.sec=Member States may maintain or introduce more specific provisions to adapt the application of the rules of this Regulation with regard to {_processing} for compliance with points (c) and (e) of paragraph 1 by determining more precisely specific requirements for the {_processing} and other measures to ensure lawful and fair {_processing} including for other specific {_processing} situations as provided for in Chapter IX.
3.0.sec=The basis for the {_processing} referred to in point (c) and (e) of paragraph 1 shall be laid down by:
3.1.sec=Union law; or
3.2.sec=Member State law to which the {_controller} is subject.
3.00.sec=The purpose of the {_processing} shall be determined in that legal basis or, as regards the {_processing} referred to in point (e) of paragraph 1, shall be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the {_controller}. That legal basis may contain specific provisions to adapt the application of rules of this Regulation, inter alia: the general conditions governing the lawfulness of {_processing} by the {_controller}; the types of data which are subject to the {_processing}; the {_data_subjects} concerned; the entities to, and the purposes for which, the {_personal_data} may be disclosed; the purpose limitation; storage periods; and {_processing} operations and {_processing} procedures, including measures to ensure lawful and fair {_processing} such as those for other specific {_processing} situations as provided for in Chapter IX. The Union or the Member State law shall meet an objective of public interest and be proportionate to the legitimate aim pursued.
3.=[G/Z/ol-a/s2]
4.0.sec=Where the {_processing} for a purpose other than that for which the {_personal_data} have been collected is not based on the {_data_subject}'s {_consent} or on a Union or Member State law which constitutes a necessary and proportionate measure in a democratic society to safeguard the objectives referred to in Article 23(1), the {_controller} shall, in order to ascertain whether {_processing} for another purpose is compatible with the purpose for which the {_personal_data} are initially collected, take into account, inter alia:
4.1.sec=any link between the purposes for which the {_personal_data} have been collected and the purposes of the intended further {_processing};
4.2.sec=the context in which the {_personal_data} have been collected, in particular regarding the relationship between {_data_subjects} and the {_controller};
4.3.sec=the nature of the {_personal_data}, in particular whether special categories of {_personal_data} are processed, pursuant to Article 9, or whether {_personal_data} related to criminal convictions and offences are processed, pursuant to Article 10;
4.4.sec=the possible consequences of the intended further {_processing} for {_data_subjects};
4.5.sec=the existence of appropriate safeguards, which may include encryption or {_pseudonymisation}.
4.=[G/Z/ol-a/s5]
=[G/Z/ol/s4]