Not just like that. You may only process personal data if there is a legal basis for doing so. In privacy jargon, this is called "grounds for lawful processing". Fortunately, there are quite a few grounds for processing. We list them here, and give some explanation on...