Without prejudice to Articles 36 and 37 , Europol may not transfer personal data to private persons .