We process your personal information as a Processor and/or to the extent that we are a Controller as defined in the GDPR.</li> <li>We must establish a lawful basis for processing your personal information. The legal basis for which we collect your personal information depends on the data that we collect and how we use it.</li> <li>We will only collect your personal information with your express consent for a specific purpose and any data collected will be to the extent necessary and not excessive for its purpose.