points
Sometimes people talk about GDPR being only the cookie banner, but thanks to it, its forbidden to collect that kind of data.
https://gdpr-info.eu/art-9-gdpr/