GDPR-THE PERSONNEL DATA PROTECTION COMPANY POLICY