General Data Protection Regulation Addendum