3rd, a controller or processor not established during the EU is going to be matter for the GDPR if it procedures the personal knowledge of knowledge subjects in the EU and that processing is connected to the “checking” in the EU in the “conduct” of knowledge subjects as their habits https://bookmarklethq.com/story17635243/cyber-security-services-in-saudi-arabia