A Consent Framework for the Internet of Things in the GDPR Era