Demystifying GDPR Transparency & Choice