As far as I understand it's not, because GDPR concerns itself with personally identifiable data and "age/gender/race" is not identifiable in general (in context of a vending machine in a large city).
Correlate this with the date and location of the vending machine and it's not so clear anymore. GDPR is also concerned with data that could potentially be used to identify you.
