PRIVACY POLICY ACCORDING TO ART 13 OF THE GDPR