Here is the official response from Kevin:
Real Geeks’ position is that it is not subject to GDPR(General Data Protection Regulation) because Real Geeks does not service or market to EU(European) residents directly. However, if an entity does service or market to EU residents directly (or uses a third-party vendor or advertiser that services or markets to EU residents directly), it may be subject to GDPR.
Real Geeks’ position is based on the conclusions that Real Geeks does not offer goods or services to data subjects in the EU or monitor behavior of EU residents taking place within the EU and thus is not a data controller under Article 3(2) of the GDPR. The European Commission has publicly said: “Provided your company doesn't specifically target its services at individuals in the EU, it is not subject to the rules of the GDPR.”
Real Geeks is a US-based company that does not solicit business or have a physical business presence within the EU. Real Geeks’ provision of services to EU residents, if any, is initiated by the EU resident’s unilateral action of browsing a Real Geeks website for properties within the United States or Canada. This limited relationship, originated by the EU resident, not as a result of Real Geeks’ targeting of EU residents, does not fall within the scope of GDPR.
Real Geeks can also rely on how the GDPR characterizes the offering of goods or services to EU residents for web-based services. Specifically, GDPR’s Recital 23 states “In order to determine whether such a controller or processor is offering goods or services to data subjects who are in the Union, it should be ascertained whether it is apparent that the controller or processor envisages offering services to data subjects in one or more Member States in the Union. Whereas the mere accessibility of the controller's, processor's or an intermediary's website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established, is insufficient to ascertain such intention, factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union.”