結果 : gdpr is applicable to data controller and processor