Art. 13

Justification

1 A breach of privacy is unlawful unless it is justified by the consent of the injured party, by an overriding private or public interest or by law.
2 An overriding interest of the person processing the data shall in particular be considered if that person:
a. processes personal data in direct connection with the conclusion or the performance of a contract and the personal data is that of a contractual party;
b. is or intends to be in commercial competition with another and for this purpose processes personal data without disclosing the data to third parties;
c. process data that is neither sensitive personal data nor a personality profile in order to verify the creditworthiness of another, and discloses such data to third parties only if the data is required for the conclusion or the performance of a contract with the data subject;
d. processes personal data on a professional basis exclusively for publication in the edited section of a periodically published medium;
e. processes personal data for purposes not relating to a specific person, in particular for the purposes of research, planning and statistics and publishes the results in such a manner that the data subjects may not be identified;
f. collects data on a person of public interest, provided the data relates to the public activities of that person.