When profiling produces legal or similarly significant effects, Article 22 of the GDPR restricts decisions based solely on ...