Data collection is much more controlled over here as well. From the simple cooke selection screens (I generally select only essential cookies, no 3rd party tracking), to it being illegal to film people in public without their permission - if you look at YouTube videos from Germany, you will see that registration plates, company logos and faces are all pixelated, when webcam footage is uploaded. GPS and date information usually has to be obfuscated as well.
I use NextDNS to block around 3 million known tracking and advertising, malware, porn etc. websites. I used to use a PiHole, but switched to NextDNS because it works when I am on mobile data as well, not just when I am at home.
But it is generally illegal to sell information collected here, by many types of companies. Medical, banking and payment processing companies cannot use the information gathered for internal purposes, other than those expressed in their T&Cs and they cannot use them for advertising to you, they are also forbidden from selling or sharing the information with third parties. Likewise, ISPs are not allowed to store or sell usage information, beyond 72 hours, for legal purposes, in case they are served with a warrant for a specific IP address or user, and they are not allowed to sell on the information gathered.
The government actually lost a case in court, trying to get the ISPs to hold the information for 6 months, the court decided that would be unconstitutional. The same for broad surveillance, like the US has, asking for every phone logged into a cell in the vicinity of a crime is generally not allowed, they generally have to give a specific number or IMEI.
They also tried to get the Bundestrojaner (State Trojan software) pushed out to large numbers of people, but, again, the court told them multiple times that would be unconstitutional, they need a court order for each person they want to surveil and they have to physically install the software on those devices.