How do you comply with the data protection act BDSG, DSGVO (a.k.a. GDPR) ?