Whether you're a family bakery in Estonia that keeps a list of local delivery addresses, or a multinational giant headquartered outside Europe that sells globally online, the EU's General Data Protection Regulation almost certainly applies to you.