Recital 25
Recital 25 of the GDPR, as in force since 25 May 2018. Its key is gdpr-recitals:rec-25.
Where Member State law applies by virtue of public international law, this Regulation should also apply to a controller not established in the Union, such as in a Member State's diplomatic mission or consular post.