3rd, a controller or processor not set up within the EU will probably be matter to your GDPR if it procedures the personal details of knowledge topics while in the EU and that processing is associated with the “monitoring” while in the EU in the “behavior” of data subjects as https://bookmarksbay.com/story17734311/cyber-security-services-in-saudi-arabia