ASA2 EU-GDPR / EU-DSGVO compliance