This is all pretty standard with GDPR.