1 Any processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union should be carried out in accordance with this Regulation, regardless of whether the processing itself takes place within the Union. 2 Establishment implies the effective and real exercise of activity through stable arrangements. 3 The legal form of such arrangements, whether through a branch or a subsidiary with a legal personality, is not the determining factor in that respect
This recital of the General Data Protection Regulation clarifies article 3 GDPR (Territorial scope).*
