Set by the law · GDPR Art. 6(1)
Lawful basis (legal ground) for processing
In plain English
Processing is lawful only if at least one of six grounds applies: consent, a contract, a legal obligation, vital interests, a task in the public interest, or legitimate interests.
The official text
Processing shall be lawful only if and to the extent that at least one of the following applies: (a) the data subject has given consent … (b) processing is necessary for the performance of a contract … (c) processing is necessary for compliance with a legal obligation … (d) processing is necessary in order to protect the vital interests … (e) processing is necessary for the performance of a task carried out in the public interest … (f) processing is necessary for the purposes of the legitimate interests
1,591 decisions on Fino cite Article 6 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.