According to the general provisions:
The regulation applies if the data controller (an organisation that collects information about living people, whether they are in the EU or not), or processor (an organisation that processes data on behalf of a data controller like cloud service providers), or the data subject (person) is based in the EU
But for Gimp there is no data collected… so why should the GDPR apply?
Furthermore the GDPR applies to enterprises engaged in “economic activity”, and I wonder what that would be here.