More specifically, it applies to companies with a legal presence in the EU dealing with people in the EU.
Otherwise, someone might think that being in the EU grants them GDPR rights when dealing with a company in Argentina.
Otherwise, someone might think that being in the EU grants them GDPR rights when dealing with a company in Argentina.
How and will that be enforced is a different discussion, but the regulation clearly protects people in the EU regardless of where the website owner is located.
GDPR is business regulations, phrased as human rights, and makes the most sense if understood as business regulations. I understand that some might choose to hold different opinions about any or all of this.