Personal Data Server: Keeping Sensitive Data under the Individual's Control