Processing of personal information must be performed with a
specific purpose in mind of which the data subject must be aware. The
retention, time periods and restriction of information must also be taken into
consideration. Thus, data cannot be collected or processed for one specific and
defined purposes and used for another without the data subjects knowledge
thereof.