[jruohonen]

Well that is right there in the FAQ you posted, assuming that they're processing personal data of Europeans (which they presumably do).