General data protection regulations (2018) & privacy policy