Privacy and Data Protection based on the GDPR