processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);