3rd, a controller or processor not established within the EU are going to be topic to your GDPR if it procedures the personal knowledge of information topics in the EU and that processing is connected with the “checking” from the EU of the “behavior” of information topics as their actions https://bookmarkbooth.com/story17689842/cyber-security-services-in-saudi-arabia