GPDR is an european regulation that aims to protect privacy and data protection. A website can take your data and use if for other reasons such as marketing only if it has your consent.
The article 15 of the law says that the users have the right to request to websites a copy of all the personal data that they have about them.