Text this: Humans in automated decision-making under the GDPR and AI Act