The individual has given clear consent for you to process their personal data for a specific purpose.

The processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

The processing is necessary for you to comply with the law (not including contractual obligations).

The processing is necessary to protect someone’s life.

The processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

The processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.