Yes, any company who is processing personal data of the EU citizens, must comply with the General Data Protection Regulation.
Yes, any company who is processing personal data of the EU citizens, must comply with the General Data Protection Regulation.