GDPR definitely applies to cameras in bars or shopping centers - in fact, much more of GDPR enforcement has been about issues such as those, the web world is no

GDPR definitely applies to cameras in bars or shopping centers - in fact, much more of GDPR enforcement has been about issues such as those, the web world is not that important. If a shopping center would want to distribute surveillance camera data to 'trusted partners' for marketing research without informed consent of the customers, that would definitely be a GDPR violation, and there would not be a "if you don't like it then don't go to that supermarket" situation but "if your supermarket can't survive without that income, then tough luck".