Welcome to your Lawful Basis Interactive Guidance Tool
Do you have (or intend to have) a contract with the individual?Hint Answer 'yes' if you have a contract with the individual, or the individual has asked you to do something as a first step prior to entering into a contract (eg provide a quote). Answer 'no' if the contract/intended contract is with one person but you need to process someone else's details. In this context, a contract does not have to be a formal signed document, or even written down, as long as there is an agreement which meets the requirements of contract law. Broadly speaking, this means that the terms have been offered and accepted, you both intend them to be legally binding, and there is an element of exchange (usually an exchange of goods or services for money, but this can be anything of value). However, this is not a full explanation of contract law, and if in doubt you should seek your own legal advice. If you are processing data of a child under 18, you need to be clear that the child is a party to the contract and not just their parent, and that they have the necessary competence to enter into the contract. If in doubt, seek legal advice.
Are you processing the data so that you can perform the contract or carry out a pre-contractual request from the individual?HintAnswer 'yes' if: • you need to process their personal data to comply with your obligations under the contract. • you haven’t yet got a contract with the individual, but they have asked you to do something as a first step (eg provide a quote) and you need to process their personal data to do what they ask. Answer 'no' if you are taking pre-contractual steps on your own initiative, or at the request of a third party.
