In the following cases, Processing of Personal Data shall not be subject to the consent referred to in Paragraph (1) of Article (5) herein:

1. If the Processing serves actual interests of the Data Subject, but communicating with the Data Subject is impossible or difficult.
   
   
2. If the Processing is pursuant to another law or in implementation of a previous agreement to which the Data Subject is a party.
   
   
3. If the Controller is a Public Entity and the Processing is required for security purposes or to satisfy judicial requirements.
   
   
4. If the Processing is necessary for the purpose of legitimate interest of the Controller, without prejudice to the rights and interests of the Data Subject, and provided that no Sensitive Data is to be processed. Related provisions and controls are set out in the Regulations.