Of course it doesn't, because the whole point of having GDPR is preventing companies from doing some productive stuff that would involve collection of personal data.