3rd, a controller or processor not set up inside the EU will be subject into the GDPR if it processes the non-public knowledge of information topics during the EU Which processing is related to the “monitoring” within the EU in the “conduct” of information subjects as their behavior requires location https://dataprivacycompliancesaudiarabia.blogspot.com/