Questions about data protection are often asked in connection with the use of cloud products such as Office 365. A distinction must be made between state access and economic use by providers.
Well-known examples of the latter are free offers such as Skydrive, Facebook and Hotmail, where the customer is the product and data is passed on specifically. A second variant of economic use are all purchased programs as it does, among other things, Microsoft. In most cases, no data is passed on here, but a look into the ABG does not hurt to play it safe.
The second point raised relates to government access, which allows each state to access personal data under certain circumstances. Due to the possibility of generating economic pressure, it is not so important in which state the data is located. Either the data is given or the product may no longer be distributed.
It seems that it is becoming increasingly difficult to keep personal data completely secure in the virtual world. The ability to switch to domestic products is just as little an alternative as to store everything on your own server due to the lack of providers. The state can also access this on the basis of anti-terrorism laws.
So you have to come to the conclusion that in the end it does not matter where the data is stored. Access can occur here and there.