ICO (UK Data Protection Authority) issues guidelines on the practical application of Article 28 of the GDPR: contracts for the processing of personal data