In light of GDPR et al., how legal is this here in Europe? To store detailed personal data on people and even their children without written consent, and host that data on some company's servers, maybe even in the US. Is there some GDPR exception that allows private individuals to store as many personal details about as many people as they like?