In other words, the big claim that the GDPR applies to every site in the world... is not true. Just like I've said from the beginning.
The GDPR applies to processing of data of individuals located in the EU/EEU and states the rights of these "data subjects". If your business violates the GDPR and wishes to also operate within the European Economic Area, it could face fines and penalties.