You're greatly underestimate GDPR. It doesn't matter how Sony got it or whether they own it or not, if the profile contains personal data of the OP, then Sony must provide them to him (when asked). What's personal data? "personal data is any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a name, a home address, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer's IP address."