“Provided your company doesn't specifically target its services at individuals in the EU, it is not subject to the rules of the GDPR. ”
https://commission.europa.eu/law/law-topic/data-protection/r...