A website that serves people who connect from the EU can easily be argued to be "offering services to data subjects within the Union". That paragraph really do

A website that serves people who connect from the EU can easily be argued to be "offering services to data subjects within the Union". That paragraph really doesn't say what you think it says. But like all such EU legislation it's really so vague that people who support the EU's political aims will read something anodyne into it, and people who are more suspicious will read something more dangerous, and they can both be right depending on the whims of the commission and ECJ. However I will note that the EU does have an established track record of making surprising and totally unintuitive judgements about laws that appear to be much clearer and more definitive than what you just cited. The wording of the law is really not as reliable as you might hope with the ECJ.