AdSense and AdWords work a bit differently and aren't exactly "real time bidding" in the industry terminology sense of the word. By that I mean they are real time and there is a bidding element, but AdWords for example stays under the Google roof and typically does not go on a real time bidding ad exchange. Contextual targeting is definitely kosher under GDPR, so Adwords and Adsense likely fall under that umbrella, for the most part.

AdX is Google's ad exchange. Over there, you do see a lot of data. However, I would bet that the personally identifying data is mostly scrubbed in the EU. User agent and page URL are not identifying enough, so they're probably included in the data.