§ 3 BlnDSG
Processing of Personal Data
(1)Outside the scope of application of Directive (EU) 2016/680, the processing of personal data not regulated by specific legal provisions shall be permissible where it is necessary for the fulfilment of a task within the competence of the controller or in the exercise of public authority conferred on the controller, and 1. the legitimate interests of the data subjects, taking into account the categories of personal data, the purposes of the processing, the duration of the processing or their evident nature, do not preclude this, or 2. federal law is being implemented and that law does not exhaustively regulate the processing of personal data. zur Einzelansicht § 3 Kapitel 3 Datenschutzbeauftragte öffentlicher Stellen