Unless you're a European citizen interacting with a European company GDPR changed nothing, they can show you a different ToS and play entirely in your court system where GDPR is meaningless.
No, it isn't. GDPR only affects EU citizens living in the EU. It's possible for companies to maintain entirely different practices for their users in the EU verses out of the EU.
