Write a draft for a code of conduct for a company that recovers data from damaged memory disks provided by customers. The draft should be limited to what should be expected from an approved code of conduct in the sense of GDPR. So include only what is necessary for achieving compliance with GDPR. Requirements and recommendations: The draft should be as simple as possible, transparent, and self-evident. It must be complete in the sense that every crucial aspect (from the point of view of compliance) should be addressed. It should be as short as possible. I would recommend organizing the code of conduct as a list of bullet points this is so convenient when applying the code. Perfect layout and perfect English are neither expected nor required. Concentrate on the crucial issues!