I think that actively soliciting personal data from people (wherever they may be) and collecting or processing it entails a higher level of responsibility. The GDPR in that situation effectively says: if you want to collect or process data on EU citizens you have to follow some rules.
I don’t believe that simply publishing a document online, for anyone who may wish to see it, has that “active character.”
However, others have pointed out that offering the Gutenberg website in a German translation is a similar act. I do think this is arguable, and this point does appear in the court ruling:
> “Apart from that, the first defendant’s website is also intended to target German users. This is supported by the fact that the website is partially in German, that the site offers German-language works, and that the first defendant explicitly strives to make the works available globally” [from the English translation]
However, going back to my point earlier, my concern is with the idea of making the website “publicly accessible in Germany.” I think there is a disconnect here between the understanding of traditional publishing (where it takes effort to publish abroad) and internet publishing (where it takes effort to prevent access from abroad).
I worry about the chilling effect of such a ruling. Should I, out of an abundance of caution, only make my blog available to readers in the UK (where I am, and where my blog is hosted)? I think it is easy to see what the effects of such a ruling could be, and (take to their logical conclusion) would have a severely detrimental effect on information exchange via the internet.