GDPR Article 6: > 1. Processing shall be lawful only if and to the extent that at least one of the following applies: > (d) processing is necessary in order t

GDPR Article 6: > 1. Processing shall be lawful only if and to the extent that at least one of the following applies: > (d) processing is necessary in order to protect the vital interests of the data subject or of another natural person; GDPR might not apply in this case, but if it does, I think you're alright.