The final step is for you to click the link in the mail I’ve just sent you.

This is required by GDPR, to ensure that the email provided really belongs to you.