In reply to Manuel.

IT IS THAT STRICT. If you need a GDPR complient website you must not request any resources or APIs from servers in the US or any other country outside EU that hasen’t a sufficient privacy protection. And I’m dealing with that since 2018. For example: I have to be much more carefull with WordPress-Plugins, because a lot of them don’t care about the GDPR a sending such request to US-servers. If they do so, i dont use them.