The core of the problem is "ownership". This is the knife plunging in the back of privacy.
My data is mine--or is it? Take Google for example. Would you agree they have the right to place a cookie on your machine? There are benefits, YouTube for example can then show you videos you're interested in on the front page for instance.
And nobody really doubts the cookie belongs to Google, right? They made it, you agreed to it, it's theirs. Which means if they want to share it with their advertisers, they have a right to do so. It's theirs.
The data in it is theirs too. So you can't complain when they do what they do with it. Because it's theirs. They made it. They collected it. You agreed to its presence. So while it's creepy as all get out you have no room to complain, right?
There are times I want privacy. I want to be able to look up stuff without anyone knowing because it's none of their concern. Since I DO NOT consent to having them look over my shoulder they damn well WON'T.
How do you balance these two?
Me, I use a trio of browsers. My daily driver is (gasp) IE 11 and it's locked down so hard it barely functions. No cookies, no third party stuff, most ad sites are blocked by DNS, etc. Gives me a nice quiet reading experience for the vast majority of my browsing.
Then for the super-private stuff I use Firefox, with encrypted DNS, and everything I can turn off turned off.
It's a pain, but given the realities of ownership it's really the only answer. GDPR is an idealist's dream--but denies half the population their ownership rights.
Take names and addresses, for instance. Companies work hard to assemble customer info, it's given to them so it's theirs. Now, that isn't to say they can't be intrusive and ask for stuff they really don't need to sell me something, and the cure for that is go to somebody else.
Money talks, yes?
In my opinion GDPR goes too far and becomes theft. But then again, the EU likes armed theft (err, issuing fines backed by the threat of thugs (er, law enforcement) and ultimately death (err, military enforcement)).
But the EU isn't alone in that perversion...it's pretty much universal among governments. Power and greed, two of the seven deadly sins.
Plus, there's reality to consider. Do not interfere in the affairs of government, for you are crunchy and go well with ketchup...