In reply to Miroslav Glavić.

There are many ways to implement it in a way that does not violate privacy laws. As long as consent is given and/or only aggregate data is saved then it’s typically compliant with most privacy regulations including GDPR