3rd, a controller or processor not founded inside the EU are going to be subject on the GDPR if it procedures the non-public data of data subjects while in the EU Which processing is connected to the “checking” in the EU from the “conduct” of data subjects as their conduct https://210list.com/story18197664/cyber-security-consulting-in-saudi-arabia