Interestingly, under GDPR EU citizens need to opt in to each of these, explicitly, and be able to toggle them off on an ad hoc basis. Additionally, PayPal is required to list each of these vendor's vendors (which could increase the number of vendors by 1 or 2 orders of magnitude). If companies actually follow the GDPR controls this is going to turtle all the way down.