The GDPR totally prohibits so-called automated individual decision-making processes, even if the data subject has given them the faculty of object them.