EU Commission concerned about the Dutch data protection authority’s strict interpretation of legitimate interests, considering it to be not in line with the GDPR, AP stated commercial purposes, such as maximization of profits, would not be considered a legitimate interest