https://www.nedwos.co.uk/2017/11/gdpr-and-shadow-profiles/