Duty to designate a representative of data protection in a municipal trading company