They might use an ad network that automatically provides geo-targeted ads to Europeans. I'm not sure if that would qualify at targeting/doing business with Europeans under the GDPR, but it wouldn't surprise me.