A "simple" one,: Do they plan to fullfill GDPR requests?
Here is a good story of a guy who tried to get all the data the company had on him without anything close to a real answer:
https://news.ycombinator.com/item?id=19959064
Ask them do they provide all the data what they store on an individual when the data is requested, and if they don't do that, ask them why.
A reference read: https://news.ycombinator.com/item?id=19959064
A "simple" one,: Do they plan to fullfill GDPR requests?
Here is a good story of a guy who tried to get all the data the company had on him without anything close to a real answer:
https://news.ycombinator.com/item?id=19959064