Cloudflare: Make sure we meet legal requirements before tunneling traffic

We need to make sure, that we have all legal requirements met before we use the tunneling of cloudflare. DNS should not matter, but Spectrum and any other routing/tunneling tech they offer are subject to a GDPR DPA (https://www.cloudflare.com/gdpr/introduction/) and maybe other regulations as well.

I am not aware if this was already included during contract negitotiation, so I am creating this tracking issue.

@dawsmith Can you drive this with legal to get clarification on this?