What do you mean by that? That isn’t such piece of data that GDPR controls, but if you like you can tell to users why it is collected, why it is needed, how it is stored and for what it is needed. If you have legit reason for all those point everything is GDPR friendly.
Those points should be considered anyway, because the answer tells right away if it is really needed or would it be just another decorative add from class nice to have, but no one isn’t actually interested ![]()
But still — knowing response time is not such data that can or would use identify a user.