legitimate activities with appropriate safeguards by a

The Member States, the supervisory authorities, the Board and the Commission shall encourage, in particular at Union level, the establishment of data protection certification mechanisms and of data protection seals and marks, for the purpose of demonstrating compliance with this Regulation of processing operations by controllers and processors. The

substantial public interest,

legal claims or

employment and social security and social protection

preventive or occupational medicine,

vital interests of the data subject or of another natural person

explicit consent to the processing of those personal data for one or more specified purposes,

Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the Union.