GDPR and Chatbots: Ensuring Compliance in Conversational AI