How should the solar geyser company manage the extensive customer data it gathers to ensue compliance with international data protection regulations?