a) processed lawfully, fairly and transparently in relation to the data subject (lawfulness, transparency);

b) collected for specified, explicit and legitimate purposes, and not further processed in a way incompatible with those purposes; further processing for archival purposes in the public interest, for scientific or historical research, or for statistical purposes is not considered, in accordance with article 89, paragraph 1, to be incompatible with the original purposes (purpose limitation);

c) relevant and limited to what is necessary for the purposes for which they are for which they are processed (data minimization); 

d) accurate and, where necessary, kept up to date; all reasonable steps must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy); 

e) kept in a form that allows identification of the persons concerned for a period than is necessary for the purposes for which they are processed; personal data may be kept for longer periods, provided that they are processed exclusively if they are processed exclusively for archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes in accordance with article 89, paragraph 1, provided that the appropriate technical and organizational measures required by the Regulation are implemented in order to guarantee the rights and freedoms of the data subject (limitation of storage);

f) processed in such a way as to guarantee the appropriate security of personal data, including unauthorized or unlawful processing and against accidental loss, destruction accidental loss, destruction or damage, using appropriate technical or organizational measures (integrity and confidentiality).