Ti	=	Article 6 - Lawfulness of {_processing}
1.0.sec	=	{_Processing} shall be lawful only if and to the extent that at least one of the following applies:
1.1.sec	=	the {_data_subject} has given {_consent} to the {_processing} of his or her {_personal_data} for one or more specific purposes;
1.2.sec	=	{_processing} is necessary for the performance of a contract to which the {_data_subject} is party or in order to take steps at the request of the {_data_subject} prior to entering into a contract;
1.3.sec	=	{_processing} is necessary for compliance with a legal obligation to which the {_controller} is subject;
1.4.sec	=	{_processing} is necessary in order to protect the vital interests of the {_data_subject} or of another {_natural_person};
1.5.sec	=	{_processing} is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the {_controller};
1.6.sec	=	{_processing} is necessary for the purposes of the legitimate interests pursued by the {_controller} or by a {_third_party}, except where such interests are overridden by the interests or fundamental rights and freedoms of the {_data_subject} which require protection of {_personal_data}, in particular where the {_data_subject} is a {_child}.
1.00.sec	=	Point (f) of the first subparagraph shall not apply to {_processing} carried out by public authorities in the performance of their tasks.
1.	=	[G/Z/ol-a/s6]
2.sec	=	Member States may maintain or introduce more specific provisions to adapt the application of the rules of this Regulation with regard to {_processing} for compliance with points (c) and (e) of paragraph 1 by determining more precisely specific requirements for the {_processing} and other measures to ensure lawful and fair {_processing} including for other specific {_processing} situations as provided for in Chapter IX.
3.0.sec	=	The basis for the {_processing} referred to in point (c) and (e) of paragraph 1 shall be laid down by:
3.1.sec	=	Union law; or
3.2.sec	=	Member State law to which the {_controller} is subject.
3.00.sec	=	The purpose of the {_processing} shall be determined in that legal basis or, as regards the {_processing} referred to in point (e) of paragraph 1, shall be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the {_controller}. That legal basis may contain specific provisions to adapt the application of rules of this Regulation, inter alia: the general conditions governing the lawfulness of {_processing} by the {_controller}; the types of data which are subject to the {_processing}; the {_data_subjects} concerned; the entities to, and the purposes for which, the {_personal_data} may be disclosed; the purpose limitation; storage periods; and {_processing} operations and {_processing} procedures, including measures to ensure lawful and fair {_processing} such as those for other specific {_processing} situations as provided for in Chapter IX. The Union or the Member State law shall meet an objective of public interest and be proportionate to the legitimate aim pursued.
3.	=	[G/Z/ol-a/s2]
4.0.sec	=	Where the {_processing} for a purpose other than that for which the {_personal_data} have been collected is not based on the {_data_subject}'s {_consent} or on a Union or Member State law which constitutes a necessary and proportionate measure in a democratic society to safeguard the objectives referred to in Article 23(1), the {_controller} shall, in order to ascertain whether {_processing} for another purpose is compatible with the purpose for which the {_personal_data} are initially collected, take into account, inter alia:
4.1.sec	=	any link between the purposes for which the {_personal_data} have been collected and the purposes of the intended further {_processing};
4.2.sec	=	the context in which the {_personal_data} have been collected, in particular regarding the relationship between {_data_subjects} and the {_controller};
4.3.sec	=	the nature of the {_personal_data}, in particular whether special categories of {_personal_data} are processed, pursuant to Article 9, or whether {_personal_data} related to criminal convictions and offences are processed, pursuant to Article 10;
4.4.sec	=	the possible consequences of the intended further {_processing} for {_data_subjects};
4.5.sec	=	the existence of appropriate safeguards, which may include encryption or {_pseudonymisation}.
4.	=	[G/Z/ol-a/s5]
	=	[G/Z/ol/s4]