If this ils well documented, I don't see how this would be a problem for GDPR. Can you elaborate?