GDPR also apply to websites that process personal data to "monitor behaviour" irrespective of whether they target or do business with EU residents as long as the person being monitored is within the EU. So your claim is also incorrect...