GDPR hasn't effect https://www.borroclub.co.uk/ So seems like it is possible to have a sharing website and not violate GDPR