Lotus Notes and the GDPR conundrum