https://gdprinfo.eu/ro/ro-chapter-7-section-3