https://gdprinfo.eu/da/da-chapter-4-section-2