sec_1_6_2__para__6 — COMMISSION NOTICE Guidance on the interpretation and application of Directive…

sec_1_6_2para6

COMMISSION NOTICE Guidance on the interpretation and application of Directive 2011/83/EU of the European Parliament and of the Council on consumer rights · European Union

For all contracts where the consumer provides personal data (irrespective of whether payment is involved or not), the trader must inform the consumer about the purposes of processing at the time when the personal data are obtained. Furthermore, the controller has to demonstrate that the processing of the personal data can be based on one of the legal grounds laid down in Article 6(1) GDPR. ‘Contract’ (Article 6(1)(b) GDPR) is one of the authorised legal bases thereunder. However, it is valid only for the processing ‘necessary for the performance of the contract’ which is strictly interpreted (31).

← sec_1_6_2__para__5 · All articles · sec_1_6_2__para__7 →

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.