New Contractual Commitments for the General Data Protection Regulations