That is not allowed. GDPR is only enforced for things which do not comply after in goes into effect. Further, it's not specific to the internet.