GDPR: you may need to compensate your supporters if you infringe their data protection rights