> They're not hiding this: It's explained in their GDPR privacy notice that they track and store your phone location and travel routes even when you're not using a parking space.

What you're describing sounds illegal. Under the GDPR they cannot collect personal information that's not strictly required for the service the customer is requesting. Unless they have express permission and the customer isn't denied service for refusing.