Algorithmic profiling in the light of human rights and the General Data Protection Regulation: the SyRI case