Privacy: GDPR, DPA and hosting in Germany