GDPR agreement for client representatives (“referrers”)