The value of people's data is precisely _why_ GDPR is important. I should be able to take it away from you after I granted you temporary access to it.
if you have exchanged funds with a site how long are they allowed to keep the data. there are tax implications regardless
GDPR defers to data retention laws for all other purposes.
Add to that the risk of them not providing good enough security regarding access to the data (such as with the Cambridge Analytica case), and giving them access to so much of your data becomes an additional problem to consider, since you have no control over that data sharing whatsoever.
Facebook Audience Network is a display ad network like Adwords.
It's deployed widely across the web and mobile apps.