§ 33 ThürDSG
Principles of the processing of personal data
(1)(Article 8, Article 4(2) and (3), Article 9(2) and (3) of Directive (EU) 2016/680)
(2)The processing of personal data shall be permissible where such processing is necessary for the performance of tasks for the purposes referred to in Section 31 and no more specific provisions in other statutes take precedence.
(3)Processing of personal data for a purpose other than the purpose for which they were collected shall be permissible where the other purpose is a purpose referred to in Section 31, the controller is authorised to process data for this purpose, and the processing for this purpose is necessary and proportionate. The processing of personal data for another purpose not referred to in Section 31 shall be permissible where it is provided for in a legal provision.
(4)Processing may be carried out for archiving purposes in the public interest, scientific or statistical purposes, where these are encompassed by the purposes referred to in Section 31 and appropriate safeguards for the rights of the data subjects are provided. Such safeguards may consist in the anonymisation of personal data at the earliest possible time, in precautions against unauthorised access by third parties, or in the processing of personal data separately from other specialist tasks in terms of location and organisation. zur Einzelansicht § 33