Marriott bang with $18.4 M for the GDPR fine