Earlier quoted context omitted.
So GMX might know who Satoshi is but... GDPR?
Most likely they know who paid for the address. I need to check if payment via credit card was an option in 2009 or SEPA only. IIRC, the gmx.com address was registered again later by someone else.
Either way can be traced