As far as I can remember, e.g., an email address with your name and surname counts as personally identifiable information, so it’s included under GDPR policies. However, I agree with the backup sentiment.