Link to GDPR Rights related to automated decision-making including profiling
The GDPR restricts you from making solely automated decisions, including those based on profiling, that have "a legal or similarly significant effects" on individuals.
In general, the standard system does not include solely automated decisions because it is necessary to manually tag or group users to profile them and therefore this does not apply. When designing forms, it is possible to assign users into groups automatically and you should check the GDPR on whether you require consent from the user to add them to groups based on it having "a legal or similarly significant effects" on individuals.
If you have created or integrated applications into your website, or extract data from our API feed for your application, then you will need to review them separately and ensure compliance with the GDPR where necessary.
Disclaimer - take independent advice - click to read more