Most websites are not GDPR compliant, if you don't like it then lodge a complaint with the relevant regulator.