GDPR is about users, not companies/organizations.
If I’m not mistaken, it applies to all persons in the EU (not « living there », or « citizen », literally everyone one currently « in » the EU).
So this is totally possible.
If I’m not mistaken, it applies to all persons in the EU (not « living there », or « citizen », literally everyone one currently « in » the EU).
So this is totally possible.
Websites offer services to all countries by default; all websites are subject to GDPR, regardless of where their owners live, unless they do something like GeoIP restrictions to exclude EU citizens.
Unless you are Facebook or Google or Amazon or Microsoft (etc), most reasonably responsible companies will already be very close to GDPR compliance. The regulations really are not too onerous.
"Don't be evil" might cover it ...