GDPR AI compliance: a practical guide for European SMEs