When we presented Surfshark with a Data Subject Access Request, the provider was quick to fulfill its GDPR obligations, but the amount of data held on us was alarming ...