“The GDPR significantly revises and harmonises how consumers’ personal data shall be protected in the European Union. When it comes to data privacy, payments might be one of the most sensitive areas for consumers.”