A practical guide to the General Data Protection Regulation (GDPR)