Dutch watchdog fines Booking.com 475k after it kept customer data thefts quiet for more than 3 weeks