GDPR requires that processing shall be lawful, and the most common way for this to happen is the if the user has given consent to the processing of his or her personal data for one or more specific purposes. If you want to use the data for a different purpose, you must first check whether…