Recital (44)

Processing should be lawful where it is necessary in the context of a contract or the intention to enter into a contract.

Source: EUR-Lex, Regulation (EU) 2016/679. Official text, reproduced without modification.