Pick one of the six Art. 6 bases per purpose before you build, document
it, and do not switch later. Consent is the last resort, not the default. Tell us the purpose and this points
to the basis that usually fits.
One purpose at a time · Art. 6
What are you processing personal data for?
Choose the closest fit. A real system has several purposes; run this once per purpose.
Does this processing include special-category data? (health, biometrics, ethnicity, religion, politics, sex life,
genetics)