Unfortunately there is no more site to prove it, but I would imagine something like this. GDPR on its own shouldn't be a problem for Streetlend, there was something more, users data releated and how to make money off them.