European clinical trials and the GDPR