This is absolutely not applicable even if both parties were in the EU, a company can not be a data subject under GDPR (only "natural persons" are), any GDPR clauses about automated decisions (and others) protect only individuals and not B2B accounts.