I believe GDPR says you can access a copy of data they store about you, not that they can't sell it.