[strgcmc]

I believe you would be mistaken about this, as per Recital 18 of GDPR: https://www.privacy-regulation.eu/en/recital-18-GDPR.htm

> (18) This Regulation does not apply to the processing of personal data by a natural person in the course of a purely personal or household activity and thus with no connection to a professional or commercial activity. Personal or household activities could include correspondence and the holding of addresses, or social networking and online activity undertaken within the context of such activities. However, this Regulation applies to controllers or processors which provide the means for processing personal data for such personal or household activities.

Reminder that, "articles" are the regulations themselves, and "recitals" are kind of supplementary FAQ-style clarifications about how/when to apply the articles.