GDPR and anonymizing personal data

[RGJ (Richard - Communiteq)]

If user requests to revoke their consent, I think we don’t need to delete the data from our database, we just don’t use it, right?

No, you must actually delete it. The GDPR calls it “erase personal data without undue delay”.