In reply to Gary.

Maybe somebody else who is familiar with GDPR requirements can help with a more detailed answer. Thanks.