3- The Controller is a Public Entity, and the Collection or Processing of the Personal Data is required for public interest or security purposes, or to implement another law, or to fulfill judicial requirements. 4- Complying with this may harm the Data Subject or affect their vital interests 5- Personal Data Collection or Processing is necessary to protect public health, public safety, or to protect the life or health of specific individuals. 6- Personal Data is not to be recorded or stored in a form that makes it possible to directly or indirectly identify the Data Subject. 7- Personal Data Collection is necessary to achieve legitimate interests of the Controller, without prejudice to the rights and interests of the Data Subject, and provided that no Sensitive Data is to be processed. The Regulations shall set out the provisions, controls and procedures related to what is stated in paragraphs (2) to (7) of this Article. Article 11 1- The purpose for which Personal Data is collected shall be directly related to the Controller’s purposes, and shall not contravene any legal provisions. 2- The methods and means of Personal Data Collection shall not conflict with any legal provisions, shall be appropriate for the circumstances of the Data Subject, shall be direct, clear and secure, and shall not involve any deception, misleading or extortion. 3- The content of the Personal Data shall be appropriate and limited to the minimum amount necessary to achieve the purpose of the Collection. Content that may lead to specifically identifying Data Subject once the purpose of Collection is achieved shall be avoided. The Regulations shall set out the necessary controls in this regard. 4- If the Personal Data collected is no longer necessary for the purpose for which it has been collected, the Controller shall, without undue delay, cease their Collection and destroy previously collected Personal Data. Article 12 The Controller shall use a privacy policy and make it available to Data Subjects for their information prior to collecting their Personal Data. The policy shall specify the purpose of Collection, Personal Data to be collected, the means used for Collection, Processing, storage and Destruction, and information about the Data Subject rights and how to exercise such rights. Article 13 When collecting Personal Data directly from the Data Subject, the Controller shall take appropriate measures to inform the Data Subject of the following upon Collection: 1- The legal basis for collecting their Personal Data.