That's a valid concern @crypto.piotr and one I'm confronted with each and every time when an airdrop asks for a full KYC. I'm not overly concerned about them selling the data but I am concerned about identity theft.
For that reason, I decline to participate in any airdrop which isn't hosted by a credible company that has already been in business for a while and has built a name for itself. Those are highly unlikely to risk trashing their reputation for our ID's and they are the only ones to whom I'll hand over my information.
That's just my two cents on it. What do you think?
Have a good one,
cheers!