GDPR - How Good Intentions Can (Partially) Backfire