GDPR requires that you log when you use information from a user in models, reports etc so this would probably have to be logged and disclosed. You would also n

GDPR requires that you log when you use information from a user in models, reports etc so this would probably have to be logged and disclosed. You would also need explicit concent to use the date of birth for advertising purposes.