How to sell database under the GDPR