Territorial scope
This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or processor in the Union, whether or not the processing takes place in the Union:
This Regulation applies to the processing of personal data of data subjects located in the Union by a controller or processor not established in the Union, where the processing is related to:
a: the offering of goods or services to those data subjects in the Union, whether or not a payment by the data subjects is required; or
b: the monitoring of their conduct, in so far as such conduct takes place in the Union.
This Regulation shall apply to the processing of personal data by a controller not established in the Union, but in a place where, under public international law, Member State law applies.
