They save that with your clear name making it a GDPR violation, as they a) don't have a legit reason to do so and b) fail to disclose it in their data processing notifications