The company’s website contained a privacy policy that was not easily understandable, which is a violation of Art. 13 GDPR.
the company’s website contained a privacy policy that was not easily understandable which is a  of   
 company’ website contain  privacy policy    easily understandable        