In reply to Manuel.

THAT’S HOW STRICT IT IS. If you need a GDPR-compliant website, you can’t request resources or APIs from servers in the US or any other country outside the EU that doesn’t offer sufficient data protection (The only exception is if you’ve obtained the user’s consent, but there’s a lot to consider there too, and you need a fallback if the user doesn’t consent.

And that’s what I’ve been dealing with since 2018 with the GDPR. I have to be much more careful with WordPress plugins, because many of them don’t care about GDPR and send such requests to US servers. If they do, I don’t use them. IT IS THAT STRICT. If you need a GDPR complient website you must not request any resources or APIs from servers in the US or any other country outside EU that hasen’t a sufficient privacy protection.Only exeption is to ask the vistor for And I’m dealing with that since 2018.

For example: I have to be much more carefull with WordPress-Plugins, because a lot of them don’t care about the GDPR a sending such request to US-servers. If they do so, i dont use them.