Comment by tjtrapp

It doesn't matter where you live or where the company is based... afaik, the determining factor is where the company stores data. In other words, if they have servers in the EU, they are bound by GDPR.