> So, if you are in the USA, but your website is serving cookies / collecting logs for the visitors, and one of your visitors is in the EU, you must comply with GDPR.

You need to heavily asterisk this because this is not true in all cases.