For users who signed in from the European Economic Area (EEA) or United Kingdom, the General Data Protection Regulations (GDPR) are supported by storing data only on servers in the Netherlands, and designating a London-based company as their responsible data controller.[1]

Now, question is, because there is a London-based company, are they allowed to read and store all messages?

[1] as above