I refuse to believe that operating a large-scale system of mass surveillance, and maintaining a database of children to determine who is "naughty or nice" is GDPR compliant. Santa Claus is a goddamn menace.