Organizations can have a legitimate interest to process data in order to provide a user with the data service they signed up for.