You are pulling legimate interest card. Well fair enough but no privacy activist will approve. And this case i highly doubt authorities would.
Legal loves this clause anything could be legimate interest. Also selling user data for profit. (People tried). It is a hilarious clause in the GDPR that needs to be refined. It leaves a lot of loopholes. But using data for other means is not allowed, you should read up.