Clause 3. may seem to permit it, but the privacy statement it refers to at

https://privacy.microsoft.com/en-us/privacystatement

states "When we ask you to provide personal data, you can decline."

In this case the way it is described, there was no request for the personal data, and no opportunity to decline.

I think you'd need a lawyer to look at it further.