"Legitimate interest" works for regular data (Article 8).

You cannot claim "legitimate interest" for sensitive data (Article 9), such as political and religious views, or sexual orientation.