product GDPR and PDPA references if applicable