@Lucseleventje There was a proper analysis in the comments. People found the relevant GDPR clauses, although there is a dispute about Santa processing the data of minors without parent consent...