Taggato: data protection by design