If you want official guidance from the collective grouping of all EU member states' Data Protection Authorities, the European Data Protection Board, here you go

If you want official guidance from the collective grouping of all EU member states' Data Protection Authorities, the European Data Protection Board, here you go, but be aware it's a 28-page PDF link: https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_3_2018_territorial_scope_after_public_consultation_en_0.pdf https://www.edpb.europa.eu/sites/default/files/files/file1/e... Examples 8, 10, 11, 12, and to some extent also example 3 are pretty good examples of the rules discussed at more length throughout the PDF. The quote you cited from that unofficial page, and the official provision you cited in your edit, is about monitoring the behavior of people in the EU. Unless the unofficial site has evidence that anyone official is interpreting it in the way they're implying is potentially possible, it's so unlikely as to be scaremongering. So many laws can be interpreted in unlikely ways that aren't worth worrying about without a reason to worry about them. To be clear, I don't think it's unlikely that the GDPR might apply if the golf course in Manitoba is specifically monitoring the behavior of people in the EU. but if they are monitoring the behavior of their primarily non-EU user base overall, failing to exclude the EU from their statistics shouldn't be a reason for the GDPR to apply.