https://gdprinfo.eu/nl/nl-chapter-4-section-4