This is a free service from lawpilots - a leading European online learning provider for data privacy, information security and compliance. Check out our courses.

Recital 25

Where Member State law applies by virtue of public international law, this Regulation should also apply to a controller not established in the Union, such as in a Member State's diplomatic mission or consular post.