Email addresses and the scope of the GDPR