GDPR guide for CSP stewards and safety representatives