Nope, that’s the interesting part of the GDPR. No ToS, no contract, no terms can get you out of it.

As long as you have a single EU citizen as user, you’re liable.

Read the article I’ve linked, it’s definitely an interesting law, and will create lots of interesting legal debates.