What personal data ReRB processes, on what legal basis, how long it is kept and how to exercise your GDPR rights.