GDPR: The FutureAI LLC$,$ based in Austria, has developed a sought$-$after web$-$based Al solution and provides it to its customers as a subscription model. It is not using its own servers to download the data needed for the service, but uses those of the company ServerIT LLC$,$ which itself is based in France. When visitors access the web service, an additional plugin is loaded from the server of the OutDoor LLC based in Brazil $($meaning that the IP address of data subjects is transmitted to Brazil$).$ Which of the following statements are true? Tick the correct answers.

The FutureAI LLC can be regarded as controller, the Serverfarm LLC can be regarded as processor.

As France is regarded as a third country, a data export takes place.

As Brazil is regarded as a third country, a data export takes place.

FutureAI LLC and ServerIT LLC do not need to conclude a processing agreement pursuant to Section $28$ GDPR$,$ as both companies are located within the European Union.