A treaty allowing technology giants to send personal data about millions of EU citizens to the US has been ruled invalid.