Your interpretation does not match GDPR. I suggest you read the link in the post you replied to.