GDPR - Retrieving or anonymizing personal data