Palantir’s entire business model is a GDPR violation, isn’t it?

Palantir isn’t the linked website though?