https://gdprinfo.eu/fi/fi-chapter-7-section-3