2. The prohibition on processing personal data referred to in Article 16 does not apply where this is necessary for the purposes referred to under (1). Article 4 1. This Act applies to the processing of personal data carried out in the context of the activities of an establishment of a responsible party in the Netherlands. 2. This Act applies to the processing of personal data by or for responsible parties who are not established in the European Union, whereby use is made of automated or non-automated means situated in the Netherlands, unless these means are used only for forwarding personal data. 3. The responsible parties referred to under (2) are prohibited from processing personal data, unless they designate a person or body in the Netherlands to act on their behalf in accordance with the provisions of this Act. For the purposes of application of this Act and the provisions based upon it, the said person or body shall be deemed to be the responsible party. Article 5 1. In the case that the data subjects are minors and have not yet reached the age of sixteen, or have been placed under legal restraint or the care of a mentor, instead of the consent of the data subjects, that of their legal representative is required. The data subjects or their legal representative may withdraw consent at any time. CHAPTER 2. CONDITIONS FOR THE LAWFUL PROCESSING OF PERSONAL DATA Section 1. Processing of personal data in general Article 6 Personal data shall be processed in accordance with the law and in a proper and careful manner. Article 7 Personal data shall be collected for specific, explicitly defined and legitimate purposes. Article 8 Personal data may only be processed where: a. the data subject has unambiguously given his consent for the processing; b. the processing is necessary for the performance of a contract to which the data subject is party, or for actions to be carried out at the request of the data subject and which are necessary for the conclusion of a contract;