German watchdog says Facebook may breach data protection rules