A practical guide to GDPR for non-European organizations (without all the legal mumbo jumbo)