DATA PROTECTION AGREEMENT