Yes. The GDPR also applies to organisations outside the EU such as the US that offer goods or services to individuals in the EU.