Source: https://www.referentsurete.fr/wa_files/bpi-cnil-rgpd_guide-tpe-pme.pdf