Guidance GDPR Scope - KINAST Attorneys at Law (Germany)

Is the GDPR relevant for your processing operations?

Yes, if for example:

Your company or group is established inside the EU/EEA and processes Personal Data of Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA.
Your company or group is established inside the EU/EEA and transfers Personal Data of any Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA (e.g. to an external service provider established in the US).
Your company or group is established outside the EU/EEA and processes Personal Data of Data Subjects within the EU/EEA in order to monitor their behaviour or to offer goods and services to them.
Your company or group is established outside the EU/EEA and transfers Personal Data collected from Data Subjects within the EU/EEA outside the EU/EEA (e.g. to an external service provider established in the US), provided that this takes place in the context of monitoring their behaviour or offering goods and services to them.
Your group is established inside the EU/EEA and shares Personal Data of Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA among the group companies.
Your group is established outside the EU/EEA and shares Personal Data collected from Data Subjects within the EU/EEA among the group companies, provided that this takes place in the context of monitoring their behaviour or offering goods and services to them.
Your group is established inside and outside the EU/EEA and shares Personal Data of Data Subjects within the EU/EEA and/or of any other Data Subjects outside the EU/EEA among the group companies and/or with external service providers.