How My Name Was Changed for Me—the Ethics of Data Collection in the Age of GDPR