gdpr compliance private cloud vs public