GDPR and EU law; talking about consent and personal data