3rd, a controller or processor not founded in the EU will be issue towards the GDPR if it processes the private information of knowledge subjects from the EU and that processing is linked to the “monitoring” while in the EU from the “conduct” of information subjects as their conduct normally https://johsocial.com/story7913855/cyber-security-services-in-saudi-arabia