SCHEDULES
SCHEDULE 3Conditions relevant for purposes of the first principle: processing of sensitive personal data
4
The processing—
a
is carried out in the course of its legitimate activities by any body or association which—
i
is not established or conducted for profit, and
ii
exists for political, philosophical, religious or trade-union purposes,
b
is carried out with appropriate safeguards for the rights and freedoms of data subjects,
c
relates only to individuals who either are members of the body or association or have regular contact with it in connection with its purposes, and
d
does not involve disclosure of the personal data to a third party without the consent of the data subject.