GDPR applies regardless of location of an organisation, if personal data of data subjects in the EU/EEA are processed: 

 

If your organisation;

-targets

-offers goods or services to

-monitors the behaviour of data subjects in the EU/EEA,

it is subject to GDPR.