[nexa] European data protection authorities clarify principle of purpose limitation