https://gdprdigest.com/ropa-gdpr-examples-understanding-records-of-processing-activities