Design a GDPR-compliant viral referral program for a European SaaS. Provide legal-safe wording for referrals, consent flows, viral mechanics that respect data rules, tracking approaches without PII leakage, metrics to monitor, and a 60-day experiment plan.