edit: If you want to listen to the explanation in more detail, Meanhash explained it on a recent episode of the Hashr8 podcast: https://h4shr8.libsyn.com/meanhash
https://www.reddit.com/r/CryptoCurrency/comments/bx9dik/face...
edit: If you want to listen to the explanation in more detail, Meanhash explained it on a recent episode of the Hashr8 podcast: https://h4shr8.libsyn.com/meanhash
https://www.reddit.com/r/CryptoCurrency/comments/bx9dik/face...
"required to opt into" doesn't count as freely given consent, so it doesn't change anything; GDPR-wise doing this is exactly the same as simply using the data without asking for the opt-in.
If they're "required to keep the data from every transaction for 10 years for tax purposes" means that they're allowed to use that data for that particular purpose only; GDPR-wise taking data gathered for tax purposes and using it for ad targeting is just as forbidden as "simply" taking data without permission and using it for ad targeting.