@inoas they had data-centers in frankfurt long before they started building infrastructure in the Netherlands.

and I figure they are GDPR compliant.
It's of course up to the owners of the VPC's to make the software they host on their VPC GDPR compliant.