https://gdprinfo.eu/en-chapter-4-section-1