GDPR compliance for food delivery apps