However, since Roobet is not based in the EU, I do not know if this also applies here.
If I'm not mistaken no matter where the business is located, if they serve EU customers, they must adhere to the GDPR law. If they fail to do so, they will be fined.
As we can see within the entirety of Roobet privacy policy, they also mention GDPR which basically tells us that Roobet does follow what have must be done:
GDPR Privacy
Legal Basis for Processing Personal Data under GDPR
..
Your Rights Under the GDPR
..
Exercising of Your GDPR Data Protection Rights
..