https://www.akku.work/blog/customer-iam-for-gdpr-compliance/