Comment by christop

The GDPR applies to the data of anyone using a service while in the EU, not just to companies that are based in the EU.