> in the entire EU there have been _only_ 800, let's say 1k such violations?
No, that's just the tip of the iceberg. Not all violations with fines/punishment are made public, and a vast majority of non-egregious violations will not result in a fine/punishment in the first place because the competent DPA will send a letter outlining what's wrong, how to fix it, and what the consequences will be if it's not fixed.
Those transgressors will simply very quickly come into compliance to avoid the trouble and the affair will not be made public.