supamanc
Gdpr relates to data that can be used to identify you. Your username and content associated with it is not identifiable,so they are free to share it. Plus you agree to the sharing of that data when you sign up. Anything thst explicity ties your username to identifiable information such as email, ip, other usernames etc is controlled by Gdpr.
You are correct, and the outcome of the hearing won’t be known for a couple of years. However indications are that the PL is basing their charges on the Der Speigle documents (out of context, doctored emails stolen from MCFC and released by a convicteded fraudster and blackmailer). UEFA based their case on the same emails, and the CAS (European sporting appeal court) found that there was no veracity to them and no evidence of any wrong doing on MCFCs part, apart from non cooperation with UEFAs ‘investigation’.