AI, biometric data, and the effective protection of fundamental rights in the recent ECJ case-law