The question is - is picture/scan of your palm YOUR data? or is it Amazon's data? I'm sure corporate lawyers can find ways around simple things like GDPR.