[nexa] GDPR: Flexibilities in the General Data Protection Regulation