Inquiry on Clay's Phone Number Databases and GDPR Compliance

Does anyone know, when looking for phone numbers on Clay, what are the databases Clay look for those phone numbers? Our privacy team is claiming this might not be in compliance with GDPR, if the person didn't allow this contact, especially a phone number that might be personal and not professional.