How GDPR has changed the advertising game