There is a bit of a conflict between the laws requiring certain companies to identify their clients and GDPR in basis, but there is something in GDPR that allows these companies to still collect the relevant data and use it or to verify the data and not store it depending on the use case.
The whole use case thing is even the reason why companies are allowed to collect data from you. You couldn’t get anything delivered if this exception wasn’t there, because they wouldn’t be allowed to progress your address.
At least that’s what I gathered from the Dutch implementation the AVG, when I last read it a couple years ago.
There is a bit of a conflict between the laws requiring certain companies to identify their clients and GDPR in basis, but there is something in GDPR that allows these companies to still collect the relevant data and use it or to verify the data and not store it depending on the use case.
The whole use case thing is even the reason why companies are allowed to collect data from you. You couldn’t get anything delivered if this exception wasn’t there, because they wouldn’t be allowed to progress your address.
At least that’s what I gathered from the Dutch implementation the AVG, when I last read it a couple years ago.