In his talk at the Amsterdam Ruby Meetup, Niels van der Zanden explores how any small business trying to sell a thing on the internet can still get a feel for who their customers are, without overstepping the legal boundaries of the new data protection regulation: https://blog.phusion.nl/2018/06/14/build-measure-learn-after-gdpr/