Any company which offers goods and services and processes the data of the citizens of the European Union will come under the purview of GDPR, even if the company is not based in a EU country. This applies even if you are sending newsletters and promotions to EU citizens.
This means that companies outside EU serving EU residents will have either become GDPR-compliant or else face the stringent penalties.
While users outside EU do not fall under this regulation, GDPR does protect the interest of people visiting Europe even if they are not a EU citizen.
If you still have unanswered questions, reach out to us at [email protected]