My subject access request was not made pursuant to the GDPR. It was made pursuant to T-Mobile's contractually binding promises to act as a subsidiary of Deutsche Telekom, and DTAG's promises that all subsidiaries it is able to control would adopt and comply with its "binding corporate rules" on privacy.