Day: October 1, 2018

GDPR lists six lawful bases for processing of personal data, and legitimate interest is one of them. There is no particular purpose defined, therefore, it is the most flexible from all the other legal bases;