Representations, warranties and compliance with the General Data Protection Regulation