You are completely off the mark with regards to gdpr. Gdpr is not only about websites. It is about how you can handle and store any personal data. Whether that's on the web or in your company address book.