Recommendation 1/2016, of the JCCA on personal data and acts contracted