Should be yes, however the data (if any) gained is considered "personal data" and should be handled conform GDPR legislation.