4.   Where the controller intends to further process the personal data for a purpose other than that for which the personal data were obtained,

the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2.