GDPR has requirements about data protection, right to forget, pseudo-anonymity, etc. But as long as the ToS doesn’t violate the rest of GDPR (i.e. things like y

GDPR has requirements about data protection, right to forget, pseudo-anonymity, etc. But as long as the ToS doesn’t violate the rest of GDPR (i.e. things like you allow us to store your passwords in plain text), are there any actual restrictions are imposed on ToS? Now, for the complainants complaints to be valid, there have to be things in the ToS that are against GDPR. As far as one can see, there isn’t. BigCos have been careful enough to not step on the toes of EU regulations. But what part of the GDPR gives the EU the right to force a company to offer its service to someone who doesn’t accept the “house-rules”? Sorry if I seem argumentative, I’m not, I’m just trying to wrap my own head around this thing.