Modifying Privacy Policy to conform with EU law

It seems the Spanish Data Protection Authority recently (Sept 2017) released an online tool to help businesses comply with the GDPR. I suggest you start there:

http://www.servicios.agpd.es/

See further: Agencia Española de Protección de Datos | AEPD