sec_1_2_10__para__3 — COMMISSION NOTICE – Guidance on the interpretation and application of Directive…

sec_1_2_10para3

COMMISSION NOTICE – Guidance on the interpretation and application of Directive 2005/29/EC of the European Parliament and of the Council concerning unfair business-to-consumer commercial practices in the internal market · European Union

The processing of personal data, which includes collecting and storing personal data, must be fair and lawful. One aspect of fair processing is that the data subject is given relevant information, including on the purposes of that processing, having regard to the specific circumstances in which the data are collected. Fair and lawful processing of personal data requires that data protection principles are complied with and that at least one of the six grounds for legitimate processing applies to any processing activity (see Article 6(1) GDPR). Consent by the individual is one of these grounds. Another is where a controller is under a legal obligation imposed by Union or Member State law to process the data (e.g. know-your-customer obligation).

← sec_1_2_10__para__2 · All articles · sec_1_2_10__para__4 →

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.