A news website collects personal data from its readers. Its privacy policy indicates that it will use the personal data "fairly and for important and socially beneficial objectives." Does the website meet the GDPR requirement to explicitly state the purpose of data collection? And if it does not, are there limits to the purposes for which the website may use the data? How would these limits be established?