eu court fines european commission €400 for gdpr violation in landmark ruling