the landlord undertakes to use the tenant's personal data only within the scope of the contractual processing and not to pass it on to third parties, unless there is a legal obligation to do so.