The Data Act: a (slippery) third way beyond personal/non-personal data dualism?