Consent and Control with Personal Data