That's also my "HO" but I was more wondering how to interpret this from a legal perspective. I've read large parts of the GDPR law but don't (at least off the top of my head) remember anything that would say either way.