https://gdprinfo.eu/ga/ga-chapter-7-section-2