Does anyone know if there is any provision in the GDPR that allows or disallows private collection of data for internal research? I understand that GDPR has provisions like "the right to be forgotten" -- we do process removal requests so the data is not available publicly.