(2) is gathered for specific legitimate purposes and is not further processed for any other purpose whatsoever. (3) is substantially correct and adequate for the purposes such data is processed for. (4) is stored in a form that enables to identify data subjects for no longer than it may be necessary for achieving the purpose of its processing.