I meant what article(s)/paragraph(s) of GDPR. GDPR is a specific law, not a general principle. You can read it here: https://eur-lex.europa.eu/eli/reg/2016/679/oj#d1e1374-1-1