GDPR compliance thermal