https://ones.com/blog/knowledge/5-essential-steps-gdpr-compliance-protect-user-data/