Agreed. Their privacy page even says they'll remove data if you withdraw consent, but they don't ask for consent. They also don't mention any you could object to data processing, claiming that "Processing is necessary to perform a contract with the data subject and to take steps toward the conclusion of a business relationship." which is a very contorted interpretation; taking steps towards the conclusion is about making quotes and such. It makes me sour on their claims "Keep your data private, compliant, and fully in the EU. As a privacy-first European company, we help you stay aligned with GDPR. No surprises. Full transparency."