GDPR compliance with cloud consulting services