The fact that I have to look into the GDPR already proves my conclusion to be true. I fully expect there to be few if any issues, but I still need to verify against the regulation, which is thousands of lines of text.
I can't just refer to "salvar on hackernews" saying it's "legitimate" if it's for legal compliance.