The Data controller decides the functions for which as well as the means by which personal data is processed. Your company is service service provider dependent exterior the EU. It offers services to customers exterior the EU. Its clients can use its services whenever they vacation to other international locations, https://www.nathanlabsadvisory.com/aramco-cyber-security-compliance.html