Re: This is, of course, not illegal.
which just means that they have to tell you what they want the info for, and ensure that they don't do anything else
And they pass that same condition to their 3rd parties. Along with they and their 3rd parties must be able to provide all their data on you at your request, and you have a right to be forgotten. On pain of much fine.