Guidelines and User contracts for Data Protection