4. This law is not applicable to processing of data: a) by a natural persons for purely personal or family purposes; b) only in case the information is provided about public officials or public (state) administration servants, reflecting their public, administrative activities or issues related to their duties. CHAPTER II PROCESSING OF PERSONAL DATA Article 5 Protection of personal data 1. Protection of personal data is based on: a) a processing that is fair and lawful; b) a collection for specific, clearly defined and legitimate purposes and shall be processed in a way that is compatible with these purposes; c) adequate data, which are relevant to the purpose of their processing and not excessive in relation to such purpose; ç) accurate data, and where necessary, updated; every reasonable step must be taken to ensure that data which are inaccurate or incomplete, having regard to the purposes for which they were collected or for which they are further processed, are erased or rectified; d) keeping data in a form that allows the identification of data subjects for no longer than it is necessary for the purpose for which they were collected or further processed; 2. The controller is in charge for applying these requirements to all kinds of processing of data, be it automatically or by other means. 10 11