if you get a letter because you violate the gdpr thing you have to pay. there is no 'it looks like you do something wrong. stop it or you will be fined'
then again the fine is based on yearly profit, if op is not a company the gdpr should not be a big problem. (but still could be)