Third, A controller or processor not set up inside the EU are going to be subject on the GDPR if it processes the private information of knowledge subjects during the EU Which processing is relevant to the “monitoring” inside the EU in the “behavior” of data subjects as their actions https://gorillasocialwork.com/story18434131/cyber-security-services-in-saudi-arabia