“Categorically, firms active in the EU, such as Vodafone, may not use cloud services provided by US-based firms, as US law allows US government agencies, such as the NSA, to request and get data on anyone whose data is processed on US-owned clouds anywhere in the world.”