In compliance with the provisions of the GDPR, data can be stored in other countries as long as they are within the European Union. This is because all member countries are subject to the same regulation, and therefore, the legal applicable legal guarantees and obligations shall be the same within all the EU.
With regard to data storage in countries outside the European Union, data may be stored abroad as long as: i) there is a Data Transfer Treaty with the European Union and the relevant country; ii) the Privacy Shield is applicable, iii) there is a European Union clause; or iv) Commonwealth related transfer mechanisms result applicable.