6.1 Data Protection law requires us to list the legal basis by which we process personal data. There are six categories available:
| Legal basis | Example |
| (a) Consent | To obtain permission to take photographs at a City Lit event or receive direct marketing |
| (b) Performance of a Contract | To fulfill the specific obligations of a contractual agreement e.g. communications about your attendance at an event |
| (c) Compliance with a legal obligation | To supply details to the Mayor of London and the ESFA the funding bodies for City Lit |
| (d) To protect the vital interests of the data subject | The processing is necessary to protect someone’s life e.g. share health information |
| (e) Public interest task | This is probably the main basis for our processing of your personal data as a provider of educational services |
| (f) Legitimate interests of the organisation | This is a broad category which incorporates diverse activities such as business planning, fraud prevention and IT Network Security |
6.2 Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only (i) where we have your consent to do so, (ii) where we need the personal information to perform a contract with you, or (iii) where the processing is in our legitimate interests and not overridden by your rights. In some cases, we may also have a legal obligation to collect personal information from you.
6.3 If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not.