The GDPR only applies to organizations based within the EU

The GDPR applies to organizations outside the EU who offer goods to people in the EU

The GDPR covers organizations operating within and outside the EU who offer goods and services to people in the EU

All the above