территории Европейского союза
"This Regulation applies to the processing of personal data of data subjects who are in the Union "
By the above definition, the data subject is more than an EU Citizen or a Resident. Both are by definition a Data Subject but the Data Subject does not have to be either. It could be someone on holiday in the EU or even someone in transit through the EU, on a flight.