3rd, a controller or processor not established while in the EU will likely be matter towards the GDPR if it procedures the personal info of information subjects during the EU and that processing is relevant to the “checking” within the EU with the “actions” of data subjects as their conduct https://sitesrow.com/story7414692/cyber-security-consulting-in-saudi-arabia