Legitimate interests assessment: the documented purpose, necessity and balancing test a company runs before relying on Article 6(1)(f) GDPR for personal data.