HeroHunt and the GDPR