They sell your email address to scammers. I receive on average 20 emails every day from scammers because of them. Every one has a different email address. I reported them to GDPR and they contacted them but they still keep doing it. The emails either tell me I've won a phone or tablet or they are from Bitcoin sellers. All just want your bank details. It goes on day after day relentlessly. I block every one but the next day there's a fresh batch.
I didn't buy anything from them, I simply signed up to get news about Apple products.
All GDPR do is write to them and tell them to stop. They told me that because they've done that the case is closed. That's it!. All that fuss about everybody changing the way they work in order to comply with the new laws and if you don't comply you just get a email telling you off. I wish I'd have known that before I spent a fortune changing my company website.