[e12e]

You're responsible for the data you store and have access to that can be linked to an individual.

The GDPR is quite clear on this.