It’s not for goods bought. Sony has the obligation to keep the purchase available for its users. For tax purposes, Sony needs to keep records for over 10 years in the Netherlands with “X purchased (or: rented) Y” regardless.

GDPR is not even relevant in this case.

Just Sony doing its Sony bastard stuff.