Data Protection Network (DPN) publishes guidance on "legitimate interest" as a legal basis for processing EU Personal Data under GDPR. 

Link to article: https://www.dpnetwork.org.uk/dpn-legitimate-interests-guidance/