It does grant them GDPR rights. If you offer service to people in the EU, you have to comply with the GDPR. If you don't, you don't have to.
How and will that be enforced is a different discussion, but the regulation clearly protects people in the EU regardless of where the website owner is located.