EU - GDPR vs bubble - legal entity and data location