Personal data processing policy under the General Data Protection Regulation (GDPR) and Portuguese Law 58/2019.