Still, users in BITCOINTALK are not ready to trust our exchange. What can we as a start-up or any start-up do to make people trust us?
Why do you think that users trust can only be gained by the fact that you use GDPR? Customer trust is gained over time, with good services that include efficient customer support, favorable fees (more competitive than the competition), and best possible security practices that include storage of customer assets in cold wallets.
Protection of user data is not the most important thing, users are most afraid of hacking, or what happened to Quadriga exchange. Ask yourself why anyone would trust you more than some respectable crypto exchange which has been in business for years?