So what is GDPR?