I'd scratch the arguably, seems to blatantly violate the pretty explicit text of the GDPR.