Legal basis for data processing

We can process personal data on various legal bases.

For processing operations for which we obtain consent for a specific processing purpose, Article 6(1)(a) of the GDPR is our legal basis.

If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as for example when processing operations are necessary to provide our service, the processing is based on Article 6(1)(b) of the GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.

If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, our processing is based on Article 6(1)(c) of the GDPR.

Finally, we can base our processing operations on Article 6(1)(f) of the GDPR: this legal basis is used for processing operations which are not covered by the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.