Article 8

Personal data may be processed only if:

a.          the person concerned has granted his unambiguous consent for the processing;

b.          the data processing is necessary for the execution of an agreement to which the person concerned is party, or to take pre-contractual measures that are necessary for the contracting of an agreement, in response to a request by the person concerned;

c.          the data processing is necessary for compliance with a statutory obligation to which the responsible party is subject;

d.          the data processing is necessary for the protection of a vital interest of the person concerned;

e.          the data processing is necessary for the correct performance of a duty of public-law task for the relevant administrative authority or the administrative authority to which the data will be provided; or

f.           the data processing is necessary for the representation of the warranted interest of the responsible party or of a third party to which the data will be provided, unless the interest or the fundamental rights and freedoms of the person concerned, in particular the right to protection of privacy, take precedence.