It's not only offering goods and services but also "monitoring of behaviour" so analytics and tracking, which, strictly speaking, makes the GDPR applicable to most websites on this planet.

In practice, if you don't have high visibility (i.e are small enough, which probably means 90% of websites) and don't have any presence in the EU then just ignore GDPR because no-one is going to go after a website on another continent because it tracks visitors and sometimes people from the EU visit it.