Policy for the protection of personal data