I keep getting emails from those LinkedIn scraping sites that construct your email from common emails conventions (e.g. $firstname.$lastname@$popularEmailProvider), and when I look through their sites, they always claim that what they're doing is legal as far as GDPR is concerned because of "legitimate interest". Ridiculous that I have to contact them to force them to stop selling my data when they shouldn't have the details in the first place.