@crypto.insurance: GDPR obligations