Please also remember that the GDPR is also applicable outside the internet, and protects people from IRL data gathering.