Open source in the quest for GDPR compliance