I would like to make an online platform, where the users can upload videos or link YouTube videos. Right now, I don't want to earn anything through this website (maybe in a couple of years, and by advertising, but absolutely not now). I use the YouTube Plugin to embed the videos in my website.
As the users can create accounts on my website, I need to include the "privacy policies" in my page.

I asked a lawyer to write this text for me and he did that. However, he warned me that using the YouTube Plugin may be problematic (even when I use YouTube in privacy enhanced mode) and is not necessarily in accordance with the data protecion rules in EU (I live in Germany).

As using this plugin is the heart of my website, I can't avoid using the plug in. Now, I would like to know how I can solve the problem.

To whom exactly do the data protection rules (DSGVO/GDPR) apply? My website would be ".com" (and not ".de", I don't register any company for that in Germany and the website is in English and not necessarily for German. Why should the regulation apply to me? Just because I am living in Germany?

How can I avoid this problem? Should/Can I register a company in the USA? Isn't there any better way?!

Thanks in advance,