According to the datasheet you ALWAYS send the 11 address bits, even when they are not used.
(Sorry this can't be a link but the ']' in the URL confuses the parser.)
Use two SPI.transfer(dataByte); operations to transfer each command (16 address+control bits).