[jungturk]

"Consent" and "Legitimate Interest" are legal terminology - they're two bases defined in GDPR and have different implications and requirements for balancing user and processor interests.

When the author says that Persona claims the "legitimate interest" basis for these data, they're saying that Persona is trying to achieve maximum flexibility for using the data (since "consent" generally requires specific agreement on a specific use for the data, and the burden of maintaining the consent records, where "legitimate interest" does not).

https://www.bulletproof.co.uk/blog/consent-vs-legitimate-int...