Your argument would be much more convincing if you shared with us what your company is doing with its users’ data. The fact that you’ve failed to do so suggests that your use case might not be that innocent, in which case it’s a good thing that GDPR makes you cease it.