Seizing the GDPR Advantage