Advanced data protection training: GDPR and contracts