“Profiling” means any type of automated processing of personal data which seeks to evaluate certain personal aspects relating to a natural person. In particular, it attempts to analyse or predict aspects of that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location.

In addition, there is also “high-risk profiling”. This is a profiling that entails a high risk to the personality or fundamental rights of the data subjects by leading to a combination of data that allows an assessment of essential aspects of the personality of a natural person.

In principle, consent is not required for data processing under the FADP. In exceptional cases where consent is required, it must be given explicitly in the case of high-risk profiling.