this is not completely correct. GDPR applies to (among others) „ a company established outside the EU and is offering goods/services (paid or for free) or is mo

this is not completely correct. GDPR applies to (among others) „ a company established outside the EU and is offering goods/services (paid or for free) or is monitoring the behaviour of individuals in the EU.“ - if you have an accidental EU customer it applies to you. Also if you have an US customer who is temporarily in the EU. https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en https://commission.europa.eu/law/law-topic/data-protection/r...