The GDPR primarily focuses on the intent of the person processing or collecting the data rather than whether the activity you engaged in was private or public, although it does take into account reasonable expectations around privacy as well. I suppose it focuses on that because it's more flexible to enforce.