Legitimate interest is the most fragile basis in GDPR and should not be relied upon, apart for server logs as suggested by recital 49. Contract (art. 6(1)b) ma

Legitimate interest is the most fragile basis in GDPR and should not be relied upon, apart for server logs as suggested by recital 49. Contract (art. 6(1)b) may be better here, but keep in mind that art. 5(1)e still applies.