My GDPR comment was made in context of previous messages, that strongly hints at general breach at Steinberg. There is more than few affected.
EU/EES citizens or not doesn't matter. It's a german company. I work in a field that has do adhere to very strict standards including GDPR, and I know GDPR quite well.