Under GDPR and similar privacy regulations, VPN providers are legally required to share the data they hold on you when asked.