European Commission says COVID-19 contact-tracing apps should respect EU privacy rules