In our case we were working on a Dutch project so we used this; AVG is the GDPR implementation for the Netherlands:

https://ictrecht.shop/en/products/handboek-avg-compliance-in...