lexiara

sec_1_6_2__para__8

Accordingly, for the processing operations that are not necessary for the performance of the contract, the trader-controller must ensure that there is another legal basis for processing under the GDPR. In contrast, the ‘contract’ in the meaning of the CRD encompasses all the rights and obligations of the parties, regardless of the distinction in the legal basis for personal data processing under the GDPR.

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.