Basically, the GDPR doesn’t guarantee your privacy at all. Instead, it hands it over to the state through its court system.
Add to that the fact that the EU’s heavy influence on the courts is a well-documented, ongoing deal, and the GDPR comes off as a surveillance law dressed up to seem the total opposite.