What is GDPR – and does it affect my micro business?