(1) To prepare and conduct government procedures for awards and honours, both the responsible bodies and other public and private bodies may process the necessary personal data, including special categories of personal data as referred to in Article 9 (1) of Regulation (EU) 2016/679, also without the knowledge of the data subject. Section 1 (8) shall apply to private bodies accordingly. Processing of personal data pursuant to the first sentence for other purposes shall be permitted only with the consent of the data subject.
(2) If processing is conducted solely for the purposes listed in subsection 1, first sentence, Articles 13 to 16, 19 and 21 of Regulation (EU) 2016/679 shall not apply.
(3) When processing special categories of personal data as referred to in Article 9 (1) of Regulation (EU) 2016/679, the controller shall take appropriate and specific measures to safeguard the rights of the data subject in accordance with Section 22 (2).
