Act no. 1.165 of 23 December 1993 on personal data protection