Days late and this will probably go unread by anyone, but further evidence that GDPR compliance is complicated, and it's difficult to avoid fines:

https://news.ycombinator.com/item?id=30135264 "GDPR penalty for passing on of IP address to Google by using Google Fonts"

It's absolutely true that using Google Fonts will cause a user's IP to be shared with Google, and that this is a violation of the GDPR. But having to review content at this level of detail is burdensome for individuals or small organizations putting anything onto the internet.