In reply to Alain Aubry.

Wrong! IIf this were the case, it would suffice to include a description of Google Fonts in the privacy policy. The court has rejected exactly that. If you transfer personal data to US servers, I would strongly advise you to obtain the explicit consent of the visitor. Otherwise it can be expensive.