By that logic, doesn't the entire Internet fundamentally violate GDPR?