They can, but then that can end up in EU court. If it happened to you, tell the consumer association of your country or your Data Protection Officer. People and companies can do what ever they like, they just have to live with the consequences.
Anti Commercial AI thingyCC BY-NC-SA 4.0Inserted with a keystroke running this script on linux with X11 bash #!/usr/bin/env nix-shell #!nix-shell -i bash --packages xautomation xclip sleep 0.2 (echo '::: spoiler Anti Commercial AI thingy [CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/) Inserted with a keystroke running this script on linux with X11 bash’ cat “$0” echo ':::') | xclip -selection clipboard xte “keydown Control_L” “key V” “keyup Control_L”