We shall only process Personal Information in order to perform in terms of the contract or in order to comply with an obligation imposed by law or where the processing protects the legitimate interests of the Data Subject.