Yes, that’s a part of ISO27018. However please bear in mind that some data might transits out of EU. E.g. when sending e-mails, Text Messages or Push notifications. For that very same reason we will never send Personal Information nor Health Information through these channels.