Im not a European, but Proton given its location in CH should be following the GDPR.