Authority to Act and GDPR Consent