The case Barbulescu v Romania shows the need to strike a fair balance between employees' privacy and a company’s access to information