The legal basis for the processing of personal data is the General Data Protection Regulation, in particular
- Art. 6 (1) (b) GDPR, which permits processing for purposes of entering into and performance under a contracts , and
- Art. 6 (1) (f) GDPR, which permits processing for the protection of our legitimate interests, unless there is an outweighing interest of the natural person concerned which prohibits such processing.