A flaw-by-flaw guide to Facebook’s new GDPR privacy changes