Web sites the next efforts below practical GDPR-compliant investigation formula