pre-approved contractual templates adopted by the European Commission that impose GDPR-level data protection obligations on the data recipient.