Facebook faces privacy fine of up to €36M