Understanding and Applying the General Data Protection Regulation (GDPR): The Five Basic Principles of Data Protection -- Principle 2, Purpose of Data Collection
Data may only be used for the purpose for which they were collected. If the purpose is not specified, then the data must be deleted. (Purpose of Data Collection)