These companies are actually making money off of GDPR