Absolutely not but if I as an EU citizen visit that site then the rules of the EU apply to my data, i. e., my data can't be sold on.

That's the situation with privacy protection laws: the user brings the laws with them.