Privacy policy and compliance with the General Data Protection Regulation (GDPR)