AggregateIQ is appealing against the accusation that it mishandled personal data and broke GDPR rules.