3rd, a controller or processor not established while in the EU is going to be issue towards the GDPR if it procedures the non-public info of knowledge subjects in the EU and that processing is connected to the “monitoring” while in the EU of your “behavior” of data subjects as https://keybookmarks.com/story17717059/cyber-security-services-in-usa