Nope, that’s the interesting part of the GDPR. No ToS, no contract, no terms can get you out of it. As long as you have a single EU citizen as user, you’re lia

Nope, that’s the interesting part of the GDPR. No ToS, no contract, no terms can get you out of it. As long as you have a single EU citizen as user, you’re liable. Read the article I’ve linked, it’s definitely an interesting law, and will create lots of interesting legal debates.