GDPR: user data managed by companies operating in the IT sector