Considering GDPR in supply chain management processes