GDPR, Data transfer, Schrems II case, data protection, data security, Privacy Shield, Standard Contractual Clauses (SCCs), pharmaceutical sector