The data controller decides the purposes for which along with the means by which personalized data is processed. Your business is service company based mostly outside the house the EU. It provides services to consumers exterior the EU. Its clientele can use its services whenever they travel to other nations https://www.nathanlabsadvisory.com/blog/nathan/achieving-soc-2-compliance-a-crucial-step-towards-data-security/