When integrated with a static link, no personal data is passed on. If a Twitter plugin is to be operated in compliance with the GDPR, an adjustment to the data protection guidelines is required, as is the explicit note that data is passed on to service providers when loading this external content. With a public profile, the tweets or content can basically be viewed and used by everyone.