Freedom of contract and the commercial value of personal data