GDPR - additional procedural rules - Timeline