Yes. Tink operates within the EU and is, as such, required to fulfill GDPR.