Personal data may be processed only in cases where one of the following conditions is met:

• The data subject has given his/her explicit consent. 
• It is expressly provided for by the laws.
• It is necessary for the protection of life or physical integrity of the person himself/ herself or of any other person, who is unable to explain his/her consent due to the physical disability or whose consent is not deemed legally valid.
• Processing of personal data of the parties of a contract is necessary provided that it is directly related to the establishment or performance of the contract.
• It is necessary for compliance with a legal obligation to which the data controller is subject.
• Personal data being made public by the data subject himself/herself.
• Data processing is necessary for the establishment, exercise or protection of any right.
• Processing of data is necessary for the legitimate interests pursued by the controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

Conditions regarding processing of personal data are limited under the Law and cannot be extended.