§ 86 BDSG
Processing of personal data for the purposes of state awards and honours
(1)For the preparation and implementation of state procedures for awards and honours, both the competent bodies and other public and non-public bodies may process the personal data required for that purpose, including special categories of personal data within the meaning of Article 9 Subsection (1) of Regulation (EU) 2016/679, also without the knowledge of the data subject. Section 1 Subsection (8) shall apply accordingly to non-public bodies in this respect. Processing of personal data pursuant to the first sentence for other purposes shall be permissible only with the consent of the data subject.
(2)Insofar as processing is carried out exclusively for the purposes referred to in Subsection (1), first sentence, Articles 13 to 16, 19 and 21 of Regulation (EU) 2016/679 shall not apply.
(3)In the case of processing of special categories of personal data within the meaning of Article 9 Subsection (1) of Regulation (EU) 2016/679, the controller shall provide for appropriate and specific measures to safeguard the rights of the data subject pursuant to Section 22 Subsection (2).