Scope of action of the Catalan Data Protection Authority