Privacy policy and the General Data Protection Regulation