Also, based on the combination of the fact that data was made public, article 6, paragraph 1, letter f), and their business, I would argue that their use of personal data scraped on the web for training purposes is legitimate