the processing of the non-public data of data subjects who're within the EU, by a controller or processor not proven from the EU, where the processing relates to the presenting of goods or companies (no matter whether free or paid out for), or even the monitoring of actions which usually takes location within the EU.Although the GCI showed reasonab