Does the GDPR apply to US companies or organisations?

Yes. As soon as a company or organisation monitors or tracks the behaviour of internet users on EU territory, the regulation will kick in – no matter where the company or organisation is based.