So, you can. This is GDPR in a nutshell. You have that protection if you have dual EU/US citizenship.