Australian businesses that may be covered by the GDPR include:

• an Australian business with an office in the EU
• an Australian business whose website targets EU customers for example by enabling them to order goods or services in a European language (other than English) or enabling payment in euros
• an Australian business whose website mentions customers or users in the EU
• an Australian business that tracks individuals in the EU on the internet and uses data processing techniques to profile individuals to analyse and predict personal preferences, behaviours and attitudes.'

This excerpt above has been taken from a document Privacy business resource 21 Updated March 2018 put out by the Office of the Australian Information Commissioner (formerly the Australian Privacy Commissioner):