The GDPR is spooking location-targeting companies