3rd, A controller or processor not set up while in the EU will be matter to your GDPR if it procedures the personal facts of information topics from the EU Which processing is associated with the “checking” during the EU from the “behavior” of information topics as their habits takes https://medium.com/@cybersecurityservice/