3rd, a controller or processor not established inside the EU is going to be topic towards the GDPR if it procedures the private information of knowledge subjects during the EU and that processing is related to the “monitoring” in the EU of your “habits” of information topics as their behavior https://sound-social.com/story7611002/cyber-security-consulting-in-usa