Recital 22

Any processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union should be carried out in accordance with this Regulation, regardless of whether the processing itself takes place within the Union. Establishment implies the effective and real exercise of activity through stable arrangements. The legal form of such arrangements, whether through a branch or a subsidiary with a legal personality, is not the determining factor in that respect

This recital of the General Data Protection Regulation clarifies article 3 GDPR (Territorial scope).*

* The reference between articles and recitals is based on the professional assessment of activeMind.legal.

Articles of the GDPR

CHAPTER X – Delegated acts and implementing acts (Art. 92 – 93)