Comment by wang_li

My understanding my be wildly incorrect, but I have the impression that the GDPR is something that applies to EU citizens regardless of where they are. A German tourist who visits Tennessee who uses his cellphone, with a local sim card, to log into a website hosted in the US to buy tickets to view the world's largest ball of twine can, under GDPR, require that said website remove all information about his visit beyond what is required by law. That seems to be quite reaching.