The purpose of processing is provided by the parent + the GDPR allows the processing of this data.
Therefore, the processing of this data is in accordance with the GDPR. It is only necessary to ensure that access
to this data is restricted to authorized persons only.