Privacy — GDPR implementation in IT outsource company (2)