The Data Protection Regulation applies to the processing of personal data of EU data subjects by an organization not established in the EU, if the processing involves
In such cases, the organization shall appoint a representative in writing for the territory of the Union, provided that the processing of personal data is not incidental.
The representative must be established in one of the Member States where the data subjects whose personal data are processed are located. The representative shall be empowered to contact the representative, in particular the supervisory authorities and the data subject, on any matter relating to the processing of personal data.