For my non-European readers, here is an excerpt of what the GDPR means: (emphasis mine)
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA).
A processor of personal data must clearly disclose any data collection, declare the lawful basis and purpose for data processing, how long data is being retained, and if it is being shared with any third-parties or outside of the EU.
I haven't been notified by Santa or his elves that he is collecting data about me. And mind you: my name and surname are my personal data, not to mention whether I have been good or naughty.
Moreover, Santa also needs my full address to deliver my presents, and again, that is also my personal data.
Does it mean that Santa is delivering me nothing this Christmas? If there is any way around this, can you please tell me what it is and how Santa can deliver me presents while still being compliant with the GDPR?
Please assume I haven't been naughty.