3. Is my personal data protected by the General Data Protection Regulation (GDPR)?