The EDPB Guidelines 3/2018 recommends a twofold approach in assessing the application of the “targeting” criterion: Does the Processing relate to personal data or data subjects located within the EU? Example/If yes, Does the processing relate to the offering of goods or services to EU data subjects? Example/ or, Does the processing involve the monitoring of data subjects’ behaviour? Example