I wonder if this isn't a GDPR violation of a pretty large magnitude? Especially because the way to get removed is this:
> If you want a record removed from the database, please include the BSSID (MAC Address) of the network in question!
There have already been a few wifi tracking cases within the EU where the perpetrators lost. A lot of this was used to track people in things like shopping malls though, so it's not exactly the same, but what came out of them was basically that people have to opt-in rather than opt-out if you want to do any sort of tracking.
As far as I'm aware this type of data does not meet the requirements [0] for a GDPR violation and there was a bit of initial litigation around Google's street view data gathering which left this part out as well (e.g. [1] for a somewhat recent discussion).
> If you want a record removed from the database, please include the BSSID (MAC Address) of the network in question!
There have already been a few wifi tracking cases within the EU where the perpetrators lost. A lot of this was used to track people in things like shopping malls though, so it's not exactly the same, but what came out of them was basically that people have to opt-in rather than opt-out if you want to do any sort of tracking.