Unfamiliarity with GDPR Leads to Violations