What I still don't understand is how companies like MaxMind (basically a fraud rating based on IP addresses and some other criteria that is mixed together) or t

What I still don't understand is how companies like MaxMind (basically a fraud rating based on IP addresses and some other criteria that is mixed together) or the german Schufa (credit rating) are still able to operate under GDPR. But in general I feel the idea and effect it had is a good thing even though the days before it went live were plain ridiculous.