For example, list of addresses themselves are not personal data. Everybody has access to addresses, you can get them at the post office for example when you try to look up code for the address.

But a list of addresses of creditors (ie. address + some non-identifying context information) is personal data.

I do not know GDPR well but given just that example I would say there is some more nuance.