> the sites have publishing certificates, which gives them the same constitutional protection as the media. They are not covered by the GDPR and the Data Inspectorate can therefore not examine them. It is also written that the authority has been critical of the fact that the sites can receive constitutional protection through the publication certificate. [1]

[1] https://www-svt-se.translate.goog/nyheter/inrikes/jurist-tar...

I'm sure the sites are legal. I was referring to the comment about such data being used for marketing.