§ 4 DSG M-V
Lawfulness of processing
(1)The processing of personal data shall be lawful where it is necessary for the performance of a task within the competence of the public body or in the exercise of official authority vested in the public body. The public body shall in that case be the controller within the meaning of Regulation (EU) 2016/679. Provided that there are no manifestly overriding legitimate interests of the data subject, personal data may also be processed for the body's own training or examination purposes.
(2)Processing for a purpose other than that for which the personal data were collected shall be lawful where 1. it is necessary to avert substantial detriment to the public interest or an otherwise directly imminent threat to public security, 2. it is necessary for the prosecution of criminal offences and administrative offences, for the enforcement or execution of criminal penalties, of measures pursuant to Section 11(1)(8) of the Criminal Code, of educational measures or disciplinary measures within the meaning of the Youth Courts Act, or for the enforcement of decisions on administrative fines, 3. it is necessary for the protection of the data subject or the rights and freedoms of other persons, 4. statements of the data subject need to be verified because there are factual indications that they are inaccurate, 5. it is necessary for the purposes of exercising supervisory and control powers, auditing of accounts, or conducting organisational reviews.
(3)Special official or professional secrecy obligations shall remain unaffected.
(4)Personal data stored exclusively for purposes of data protection supervision, data security or to ensure the proper operation of a data processing system may not be processed for other purposes.
(5)Where personal data are linked with further data of the data subject or of third parties in such a way that the separation of necessary and unnecessary data is not possible or is only possible with disproportionately high effort, the access to, the transfer within the controller's body and the transmission of the data to other public bodies, even where not necessary for the fulfilment of the respective task, shall also be lawful. The unnecessary data shall be subject to a prohibition of use, of which the controller shall give notice. zur Einzelansicht § 4 Teil 3 Rechte der betroffenen Person