When Does the GDPR Provide More Latitude for a Company

When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?

A) When the data has been pseudonymized.
B) When the data is protected by technological safeguards.
C) When the data serves legitimate interest of third parties.
D) When the data subject has failed to use a provided opt-out mechanism.