The preamble of the GDPR states that it regulates the fundamental right to privacy, not the human right to privacy. The human right to privacy is much lower level than the fundamental right to privacy.

To repeat myself: I'm [also] NOT against the GDPR and I totally understand the need, I just wish it would be regulated on a more universal level.