> You could have a website that's in violation of GDPR, travel to Europe on vacation or business, and get arrested.

No, you can't. This still requires a warrant.