Selling/collecting - I'm glad that GDPR seems to treat them at almost equal footing, even harder to prosecute if you leave a huge backdoor

It's my data - fuck off, I'm interested in the business you're offering, not increasing your bottom-line at the expense of my privacy and especially I don't want to have a profile of me created just because you can. If I haven't consented to it, you won't do that - simple as that