GDPR compliance

The problem may be that the company, DPA,
is from India.

A location would be handy: EU or USA