Territorial scope
An establishment, deliberate offering, or behavioural monitoring can bring particular processing into GDPR scope. Mere accessibility is not enough.
GDPR territorial scope · Articles 3 and 27 · Chapter V
Choose where the organisation is based, where affected people are located, and the facts that change the test. The result keeps territorial scope, representation, and international transfers separate.
Build a scenario
Country routes are fixed and indexable. The activity controls refine the live analysis without manufacturing a separate search page for every minor combination.
Why these questions
An establishment, deliberate offering, or behavioural monitoring can bring particular processing into GDPR scope. Mere accessibility is not enough.
An organisation outside the EEA may need a representative where affected people are located. The occasional low-risk exception is narrow.
A separate disclosure to a recipient outside the EEA may require adequacy, SCCs, BCRs, or another transfer route. Article 3 does not answer that question.
Business location
The organisation’s home country changes the separate transfer analysis. Adequacy may be available, conditional, or absent.
Affected people
The territorial test is European, while targeting evidence, representative placement, language, and supervisory context can be country-specific.
A boundary worth preserving
An organisation outside the EEA can fall under GDPR through Article 3. That does not, by itself, answer whether a separate disclosure engages Chapter V, an adequacy decision, SCCs, or another transfer mechanism.
Cookies & storage
Essential storage keeps you signed in and secure — it's always on. With your OK we'd also use analytics to see how the product is used and improve it; analytics only runs if you allow it. See our privacy policy.