If you are a non-EU company that offers goods or services to people in the EU, or monitors their behaviour, you can be in scope of the GDPR...