They are not the only one.
I was offered a job by an operator in their office when I visited them which I kindly rejected. They took the GDPR matter very seriously and the Director of Flight Ops handed me all the copies of my certificates and documents and made personally sure all were erased from their database. And I was invited to apply to them again in future.
The most "instrusive" so far have been British operators with questions about my ethnicity, religion and sexual orientation and a few weird questions I had never been asked before.