The GDPR applies regardless of where the company is, so long as the requester is an EU resident.