GDPR is so complex, but this helped my understanding a little bit: https://www.convert.com/gdpr/ab-testing-application-complian...