Is it OK with GDPR if, i use website developer company, which is located outside of EU? If so then can i allow them to use there URL as "design by"?