The Legality of the Data Retention directive in light of the fundamental rights to privacy and data protection