Guidance GDPR Scope

Is the GDPR relevant for your processing operations?

Yes, if for example:

  • Your company or group is established inside the EU/EEA and processes Personal Data of Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA.
  • Your company or group is established inside the EU/EEA and transfers Personal Data of any Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA (e.g. to an external service provider established in the US).
  • Your company or group is established outside the EU/EEA and processes Personal Data of Data Subjects within the EU/EEA in order to monitor their behaviour or to offer goods and services to them.
  • Your company or group is established outside the EU/EEA and transfers Personal Data collected from Data Subjects within the EU/EEA outside the EU/EEA (e.g. to an external service provider established in the US), provided that this takes place in the context of monitoring their behaviour or offering goods and services to them.
  • Your group is established inside the EU/EEA and shares Personal Data of Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA among the group companies.
  • Your group is established outside the EU/EEA and shares Personal Data collected from Data Subjects within the EU/EEA among the group companies, provided that this takes place in the context of monitoring their behaviour or offering goods and services to them.
  • Your group is established inside and outside the EU/EEA and shares Personal Data of Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA among the group companies and/or with external service providers.