The GDPR applies to any companies who process the personal data of subjects residing in the EU, regardless of where the company itself is located.