c. the processing is necessary in order to comply with a legal obligation to which the responsible party is subject; d. the processing is necessary in order to protect a vital interest of the data subject; e. the processing is necessary for the proper performance of a public law duty by the administrative body concerned or by the administrative body to which the data are provided, or f. the processing is necessary for upholding the legitimate interests of the responsible party or of a third party to whom the data are supplied, except where the interests or fundamental rights and freedoms of the data subject, in particular the right to protection of individual privacy, prevail. Article 9 1. Personal data shall not be further processed in a way incompatible with the purposes for which they have been obtained. 2. For the purposes of assessing whether processing is incompatible, as referred to under (1), the responsible party shall in any case take account of the following: a. the relationship between the purpose of the intended processing and the purpose for which the data have been obtained; b. the nature of the data concerned; c. the consequences of the intended processing for the data subject; d. the manner in which the data have been obtained, and e. the extent to which appropriate guarantees have been put in place with respect to the data subject. 3. The further processing of personal data for historical, statistical or scientific purposes shall not be regarded as incompatible where the responsible party has made the necessary arrangements to ensure that the further processing is carried out solely for these specific purposes. 4. The processing of personal data shall not take place where this is precluded by an obligation of confidentiality by virtue of office, profession or legal provision. Article 10 1. Personal data shall not be kept in a form which allows the data subject to be identified for any longer than is necessary for achieving the purposes for which they were collected or subsequently processed. 2. Personal data may be kept for longer than provided under (1), where this is for historical, statistical or scientific purposes, and where the responsible party has made the necessary arrangements to ensure that the data concerned are used solely for these specific purposes. Article 11 1. Personal data shall only be processed where, given the purposes for which they are collected or subsequently processed, they are adequate, relevant and not excessive.