GDPR - Subject Access Request - Process and Protocol