The ‘user-centric’ and ‘tailor-made’ approach of the GDPR through the principles it lays down