The European Data Protection Board (EDPB) has issued new guidelines about the intersection between online services and processing based on the necessity of performance of a contract. The guidelines consider if this basis for processing can be conducted by online services for targeted advertising and service improvement among other purposes. This basis for processing is narrower than people think. The full proposed EDPB guidelines can be read here.