According to: https://commission.europa.eu/law/law-topic/data-protection/r...
> Provided your company doesn't specifically target its services at individuals in the EU, it is not subject to the rules of the GDPR.