Council of State NL: Breach of the GDPR does not yet imply damage; no punitive character of the claim for damages