I’m also curious whether this is legal in the Netherlands. Certainly strange that it’s encouraging me to check on my neighbors to see what they’ve downloaded.
I'm not sure why that is legal, so then perhaps collecting this without a legal basis (consent, fulfillment of a contract, vital interest of the data subject, etc.) is also legal, but that doesn't exempt the site from the right to view your data or the right to object to having your data processed if there is no grounds for it.
Of course, there are no repercussions if the domain is registered and hosted in a country that doesn't tell the EU who's behind it or doesn't do extradition and there are no European assets to cease. Worst they can do then is block the site from Europe like they did with The Pirate Bay and similar sites.