If I understand WebRTC correctly vMix Calls per se does not complicate privacy/GDPR as long as the calls are Peer-to-Peer (STUN). Implying of course that both ends of the call must be GDPR compliant. Or maybe I am stretching that a little bit, IP numbers and other stuff are communicated and stored somewhere.

But how about situations when TURN servers are applied? Is there a way to understand what that means for us who must adhere to GDPR? I guess that even if some TURN servers are in Europe, there is no way for me to know which server is used...

Thanks,
/richard