Gravar-mail: The GDPR and the research exemption: considerations on the necessary safeguards for research biobanks