This is nothing but a landing page?
Personally I'd have targeted handling GDPR access requests as a business domain. These are €20 million timebombs each primed to explode after 30 days.
As a CEO I'd want some pretty damn good visibility into these. There's no cheap/good solution for this out there today.