E-mail address containing name not always protected under GDPR