yes, ads can be GDPR compliant. Consider search ads. They are shown based on the keywords being searched by the user, no data collection needed for search ads to work really well.