https://gdprinfo.eu/sl/sl-article-40