This article discusses the territorial application of the provisions of the GDPR in the context of digital platforms made available by organizations outside the Union through an analysis of relevant CJEU case law and EDPB recommendations. In the introduction we have shown the main criteria for establishing the territorial application of GDPR, in section 2 we have analyzed the notion of headquarters in the context of GDPR, and in sections 3 and...