(i) for the performance of a contract to which the data subject is a party,(ii) in order to take steps at the request of the data subject prior to entering into a contract,(iii) for compliance with a legal obligation to which the data controller is subject other than an obligation imposed by contract, or(iv) to prevent -(I) injury or other damage to the health of the data subject, or(II) serious l