How GDPR affects Your Website and Why You Need a Privacy Policy