Yet somehow, I doubt that GDPR would exist if Google and Facebook were German companies, rather than American ones.
And Germans are more privacy aware than Americans, for obvious historical reasons.
People that blame Cambridge Analytica are missing the point, which is that Facebook is a threat to everything we know just by existing.
You are right. GDPR is a very German thing. We essentially have a two digit party (the greens) which rose because of the rejection of a general census (and nuclear energy). In Europe we are also not alone with that (see pirate party).
Oh and regards sensibility: The EU tried that. Google and friends gave a shit. Then result was creating a regulation more painful to them. These companies apply their US based understanding of right and wrong to the globe. You see China, EU and Russia are reacting and applying their local rules. With different methods, but they do.
GDPR is not against the ad business, it is only setting limits and obligations on how you can use personal data. It is saying that it is not normal for businesses to build huge user profiles without oversight or even consideration.