Data Masking with Privacy Guarantees