-
kellabyte IANAL, but I don’t think IP addresses you only briefly use for processing, or store only for, say, a few hours, can be considered a GDPR violation.
-
kellabyte So far, I’ve been able to get by with asking myself “is this kind of usage something for which I can reasonably be expected to ask for the user’s consent”, given the kind of contractual relationship I already have with them