What are the legal bases for processing data under the General Data Protection Regulations (GDPR)

PTAs typically rely on the following legal bases when processing personal data:

• Consent
  Individuals have given clear permission for you to store and use their data in the ways outlined in your privacy policy and terms.

• Contract
  Individuals have explicitly agreed to your website’s terms and conditions, making data processing necessary to fulfil that agreement.

• Vital Interests
  Data is processed to protect someone’s health or safety, for example when collecting medical or allergy information about a child for an event.

• Legitimate Interests
  Processing is necessary for the legitimate interests of your organisation, such as contacting your community about events or activities, provided those interests do not override individuals’ rights.