It's a nice summary of the GDPR, and following this TLDR in good faith will get you in compliance (at least enough to avoid scrutiny from the regulator).