GDPR and third party risk · HackerTrans