the processing of the non-public data of data subjects that are while in the EU, by a controller or processor not established from the EU, the place the processing relates to the featuring of goods or products and services (irrespective of whether absolutely free or compensated for), or even the checking of habits which can take spot within the EU.