They market to US customers, sell to US customers and process payments through US financial institutions, so legally they operate in the US. Just as Prusia himself is protected by GDPR protections from US companies which offer services to citizens of EU even if they aren't physically located there.