For a start: Section 18 directly indemnifies the GP because they’re not a commercial entity. Section 49 gives, additionally, specific carve outs for logging ev

For a start: Section 18 directly indemnifies the GP because they’re not a commercial entity. Section 49 gives, additionally, specific carve outs for logging even if they were a commercial entity. Consent is needed to pass logging data to third parties or to process it beyond end user functionality. Its easier to just read the regulation: https://eur-lex.europa.eu/eli/reg/2016/679/oj https://eur-lex.europa.eu/eli/reg/2016/679/oj