Engineering Personal Data Protection in EU Data Spaces