Thanks, I know about this, but a DPA is probably not enough for data storage of personal information. This is most likely for logs, handling of IPs, etc.
Honestly, I have no idea.
I will probably end up hiring a lawyer or some consultant because all this is way above my head.