You ToS is widely at odds with GDPR though, maybe modify it so it is more in-line?