request acknowledgement - GDPR compliance