The GDPR advocates transparency towards your customers or prospects.
It is always possible to use personal data, but the data subject must be informed when it is collected or used.
Personal data that is not necessary for the intended service can no longer be collected.
For example, if you want to make electronic communications, you can no longer request the postal address or telephone number (unless a specific action is subsequently carried out).