Article 17
1. The prohibition on processing personal data concerning a person’s religion or belief, referred to in Article 16, does not apply if the processing takes place by:
a. religious associations, independent parts thereof or other associations with a spiritual basis, to the extent that this concerns data on persons who are members of these;
b. institutions with a religious or ideological basis, to the extent that this is necessary in view of the objective of the institution and for the realisation of its fundamental goals; or
c. other institutions to the extent that this is necessary in view of the mental care of the person concerned, unless that person has objected to this in writing.
2. In the cases, referred to in paragraph 1(a), the prohibition also does not apply to personal data concerning the religionor belief of the family members of the person concerned, to the extent that:
a. the relevant association maintains regular contact with those family members on the grounds of its objective and
b. those family members have not submitted any objections to this in writing.
3. In the cases, referred to in the first and second paragraphs, no personal data shall be provided to third parties without the consent of the person concerned.