How to Operate a GDPR-Compliant Business in the EU (Part 1 of 3)