You own the site. You are the “data controller”. You must comply. http://ec.europa.eu/justice/data-protection/data-collection/obligations/index_en.htm
‘Donkey-tugging’ EU data protection law backed by MEPs ‘Donkey-tugging’ EU data protection law backed by MEPs