They will only use your personal data when the law allows them to. Most commonly, they will use your personal data in the following circumstances:
Where they need to perform the contract they are about to enter into or have entered into with you.
Where it is necessary for their legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where they need to comply with a legal or regulatory obligation.