It is the difference between personal data and sensitive data, I'm not expert of the subject, but on this article https://gdpr-info.eu/art-9-gdpr/ https://gdpr-

It is the difference between personal data and sensitive data, I'm not expert of the subject, but on this article https://gdpr-info.eu/art-9-gdpr/ https://gdpr-info.eu/art-9-gdpr/ they say > Paragraph 1 shall not apply if one of the following applies: the data subject has given explicit consent to the processing of those personal data for one or more specified purposes But I was talking about third party that collect information, not the website itself, I was only working on third party so I don't know what websites are allowed to do