Can data be processed for any purpose?

Answer

No. The purpose for processing of personal data must be known and  the individuals whose data you’re processing must be informed. It is not possible to simply indicate that personal data will be collected and processed. This is known as the ‘purpose limitation’ principle.