The Dutch watchdog said the transfers were a “serious violation” of EU data protection regulation.