We would like to collect data from patients. is there a way to make the data collection GDPR compliant? thanks alessandra