Exterro: Walkthrough on data retention under GDPR