[donkeyd]

Yup, this is exactly what GDPR is aimed at. They thought about what they need, why they need it and have it documented.