You can't reasonable identify someone via an IP address alone without issuing a warrant to the ISP. GDPR is fine with storing such information. If you are able

You can't reasonable identify someone via an IP address alone without issuing a warrant to the ISP. GDPR is fine with storing such information. If you are able to map the IP to a user then it becomes personally identifiable but the IP itself is not.