Data privacy: elaborate on what data is collected, where it is stored, who the Data Controller and Processors are (compliant to GDPR) #399