3rd, A controller or processor not established while in the EU will probably be subject matter to the GDPR if it processes the private details of data subjects inside the EU Which processing is related to the “monitoring” during the EU in the “habits” of knowledge topics as their actions https://altbookmark.com/story19324188/cybersecurity-consulting-services-in-saudi-arabia