DPIAs Made Practical: Managing Privacy Risks in Real Projects