This is way off base. Using PI to fulfill a request someone has made of you is the happy path of GDPR, you just can't retain or reuse that information more than you have
1) a contract or
2) permission or
3) a lawful task
For.
Having other parties process PI for you is fine as long as it's done under an agreement that binds them to the same terms.
1) a contract or
2) permission or
3) a lawful task
For.
Having other parties process PI for you is fine as long as it's done under an agreement that binds them to the same terms.