We are a company offering training courses. One of our clients is based in the Middle East. One of our trainers goes to the middle east to deliver training to people who reside in countries outside of the EU. Our trainer collects their names in order to produce their training certificates back in the UK. How does transfer of their personal data to the EU relate to GDPR given that they do not reside in the EU, and collection of the data is outside the EU?