gdpr legal services startups