But... your site doesn't use cookies and doesn't process personal data. Why do you think you're in breach of GDPR?
I think lots of non-EU and non-technical bloggers would likely see the email I had (which was just opportunistic marketing spam from a European company and not nefarious) and think they were in breach of something like you say they are probably not.
This is true for all laws, all scams, all ads.