Your personal data will be processed:

(a) bsed on your consent (Article 6(1)(a) of the GDPR)
your personal data may be processed for the purpose of direct marketing carried out by means of the Newsletter or by means of telephone contact only on the basis of your express, voluntary and prior consent. The lawfulness of such processing is based on your consent. Any consent given may be withdrawn at any time. Please note that the withdrawal of consent is only effective for the future and does not affect the lawfulness of processing carried out before its withdrawal.
(b) for the purposes resulting from legitimate interests pursued by the Controller or a third party (Article 6(1)(f) of the GDPR)
Processing may be deemed necessary for the pursuit of our or a third party’s legitimate interests when it does not unduly affect your interests or fundamental rights and freedoms. When processing personal data on this basis, we always seek to find balance between our legitimate interests and your privacy. In the case of processing based on this legal basis, the Controller shall analyse the risk of violating your rights or freedoms and assess the technical and organisational measures applied to protect personal data. Legitimate interests in connection with the operation of our website may include:
(i) the assertion or defence against claims;
(ii) direct marketing in traditional form (e.g. letter marketing);
(iii) handling enquiries and complaints;
(iv) use of cookies and profiling for marketing purposes;
(v) taking care of the security of our IT systems;
(vi) carrying out analyses on how the website or individual parts of the website are used and how improvements or enhancements can be made to the website;
(vii) internal administrative purposes, including statistical objectives.

(c) the processing is necessary for the purpose of complying with legal obligations incumbent on the Controller (Article 6(1)(c) of the GDPR)