https://www.advent-im.co.uk/gdpr-for-schools-9-steps-to-help-you/