I am strangely reassured by the GDPR email I got from my VPN provider. They are in a EU country, so breaking the GDPR will have consequences. They state clearly

I am strangely reassured by the GDPR email I got from my VPN provider. They are in a EU country, so breaking the GDPR will have consequences. They state clearly what they store and what they are required to store. There is an actual company in an actual house and they are in a jurisdiction I understand. No shady parent companies and weird tax schemes to get money from Panama companies. These kinds of VPN services have always seemed shady to me.