Legal Bases for Processing of Personal Data
Is an identified legal basis required in order to collect or process non-sensitive personal data?

Last reviewed: 29 December 2023

Yes.

The following are potential legal bases for processing personal data:

☐       appropriate notice has been provided to or made available to the data subject
☒       the data subject has provided consent to the processing for the identified purposes
☒       the personal data is necessary to perform a contract with the data subject
☒       the personal data is necessary to comply with a legal obligation
☐       the personal data is necessary to protect the vital interests of a natural person
☐       the personal data is necessary for a public interest
☐       the personal data is necessary to fulfil a legitimate interest of the controller or third party (provided that the interest is not overridden by the data subject's privacy interests and the data subject has not made use of his/her right to object)
☒       other

  • Personal data is obtained from unrestricted public access sources.
  • Personal data is collected for the performance of the duties inherent to the powers of the State.
  • Personal data is limited to name, ID number, tax or social security ID number, profession, date of birth and domicile.
  • Personal data is collected by financial entities in connection with transactions performed by customers of the referred entities.