Mind the GDPR (Pt. 3)