https://benjaminellis.org/2018/04/17/gdpr-and-pecr-and-getting-salty-and-re-permissioning/