Third, a controller or processor not proven while in the EU might be subject on the GDPR if it processes the non-public info of knowledge topics during the EU Which processing is relevant to the “monitoring” during the EU on the “behavior” of knowledge subjects as their habits requires location https://worldlistpro.com/story19328110/cyber-security-services-in-saudi-arabia