Data protection

You need to write: "Personal data will be processed for the provision of the service and for the following legal obligation (i.e., for bookkeeping purposes) and in compliance with the requirements of EU Regulation 2016/679 (EU GDPR) for more information about how we process your data and rights of data subjects, please consult our privacy notice at our store."You should have a privacy notice for your customer data in your store (or on your website, if you have one).

Here you can find more information about privacy notice.

• Four main questions for obtaining and managing data subjects’ consent under GDPR: https://advisera.com/eugdpracademy/knowledgebase/four-main-questions-for-obtaining-and-managing-data-subjects-consent-under-gdpr/
• Is consent needed? Six legal bases to process data according to GDPR: https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/

If you need to understand how to implement EU GDPR compliance in your organization, you may consider enrolling in our free EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course/