Article 6. Lawfulness of processing 1. Processing shall be lawful only if and did the extent that at least one of the following applies.

A, the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

B, processing is necessary for the performance of a contract to which the data subject is

party or in order to take steps at the request of the data subject prior to entering into a

contract. C. processing is necessary for compliance with a legal obligation to which the

controller is subject. D. processing is necessary in order to

protect the vital interests of the data subject or of another natural person. E, processing is

necessary for the performance of a task carried out in the public interest or in the exercise of

official authority vested in the controller. F, processing is necessary for the purposes of the

legitimate interests pursued by the controller or by a third party, except where such interests are

overridden by the interests or fundamental rights and freedoms of the data subject which require

protection of personal data, in particular where the data subject is a child.

Point F of the first subparagraph shall not apply to processing carried out by public authorities in the performance of their tasks.

2. Member states may maintain or introduce more specific provisions to adapt the application of the rules of this regulation with regard to processing for compliance with points C and E of paragraph 1 by

determining more precisely specific requirements for the processing and other measures to ensure

lawful and fair processing including for other specific processing situations as provided

for in Chapter 9. 3. The basis for the processing referred to in point, C and E of paragraph 1 shall be laid down by

A, union law, or B, member state law to which the controller is subject. The purpose of the

processing shall be determined in that legal basis or, as regards the processing referred to in point,

E of paragraph 1, shall be necessary for the performance of a task carried out in the public

interest or in the exercise of official authority vested in the controller. That legal basis may

contain specific provisions to adapt the application of rules of this regulation in Terralia,

...