I went to a spa with a friend (who's a member) the other day, and to get inside as a paying customer, these people require a facial recognition scan and a finge

I went to a spa with a friend (who's a member) the other day, and to get inside as a paying customer, these people require a facial recognition scan and a fingerprint. If you don't think there's a problem with that (and the inevitable leak of those tens of thousand of collected biometrics within a couple years), then you probably can't see what GDPR really is for.