Exactly, if you're providing a special service that requires logging (financial, etc.) then you need to follow other laws that trump GDPR, same as you need to o

Exactly, if you're providing a special service that requires logging (financial, etc.) then you need to follow other laws that trump GDPR, same as you need to obey traffic lights except if you drive an ambulance and there's an emergency, at which point other laws trump the general driving code.