Under the GDPR, where personal data is not obtained directly from the data subject, a controller is exempt from directly providing information about processing...