Something must be invoking the BT service.
Your second images shows "GattService" as the running process, and that it was "started by application". GATT (Generic Attribute Profile) is a BT specification that essentially describes how individual BT devices interoperate.
Do you, for example, have S-Health enabled? This may have invoked the BT service in an attempt to find and connect with a heart rate monitor using the HRP profile.