GDPR implications

We are commercial real estate lenders and sell loans to our parent bank in Germany which we later service using a master service and support risk assessment using reporting tools. The personal data for these loans is all originally collected in the U.S. and might include a list of building tenants (generally corporate but also some apartment tenants) , financial information of guarantors to the loans and contact information of people that played a role in the loan (client, law firms, property appraisers, title companies etc.) Is this something that has GDPR implications if teh data is all sourced originally from the U.S. ?