Ten things you should know about the GDPR