In this theoretical sub-module, all the legal bases for processing personal data will be explained to the small and medium enterprises (users) in a practical way, by using real life examples from various industries. Organizations will be warned of the most common mistakes that are made while deciding on which lawful basis to rely. The aim of this sub-module is to familiarize users with the processing of personal data and the respective legal bases through practical examples in order to facilitate their understanding and application of different legal bases for the processing of personal data. After reviewing the video and the theoretical part, users will be able to answer questions to check their knowledge. The user will be offered statements, in respect of which he/she will be able to state whether he/she considers them true or false. Once the user has provided his statements, an explanation of the correct answer will appear. If the user achieves a minimum of 80 % correct answers, then the system will generate a certificate as proof of successfully passing the theoretical sub-module.