Helsinki VPS for EU privacy law compliance

I need to park some mailing infrastructure in the EU for GDPR compliance. SPF/DKIM/DMARC signing, list management, the usual. Hot take: location matters less than controller documentation, but clients keep asking for "Finnish servers specifically."

For what it's worth, I have found two providers with actual Helsinki presence:

• Hetzner: lists "HEL1" region, AS lookup says Helsinki
• HostHatch: no Finland location, closest is Stockholm

Before I commit to either, has anyone verified actual Finnish hardware? I need real datacenter presence for DPA purposes, not Swedish VM with Helsinki geolocation. Correct me if I'm wrong, but Sweden and Finland have different supervisory authorities.

1) Your situation is complex
A) GDPR requires actual location verification
I) Not just marketing claims
Ii) Not just traceroute guesses
B) Provider verification methods
1) RIPE database lookup
2) Physical datacenter tour
3) Contractual annex specifying facility
2) Hetzner issues
A) HEL1 may mean "Helsinki optimized"
I) Not Helsinki hosted
Ii) Common marketing ambiguity
B) I have seen this before
1) 2019: "Zurich" meant Milan
2) 2021: "Oslo" meant Stockholm
3) HostHatch traceroute problem
A) Stockholm is not Helsinki
I) Different country
Ii) Different legal regime
B) Possible explanations
1) Upstream transit through Sweden
2) Actual Swedish server
3) BGP anycast misconfiguration
4) My recommendation
A) Demand proof
B) Accept nothing less

I had the same issue with "AMS1" routing through London.

Hetzner still hasn't fixed that AS lookup?