https://gdprinfo.eu/et/et-chapter-7-section-2