I’m no GDPR expert, but wouldn’t it apply to data of European citizens even if they’re not the customer? Since unroll.me slurps up email, don’t they still have to comply with all the rules for data because presumably some of that email data originates from the EU?