On inferred personal data and the difficulties of EU law in dealing with this matter