Bosses who snoop on job applicants' Facebook or Twitter profiles could be breaching data protection laws, warn EU regulators