A Contractual Approach to Data Privacy