Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens

Holding (summary, not the official text)

A purely commercial interest, such as selling members' data to sponsors, can be a legitimate interest if it is lawful, but the processing must be strictly necessary and pass the balancing test.