A pragmatic, visual approach to mapping personal data flows for GDPR compliance — covering collection, storage, use, transfer and disposal across legal entities.