Aplogies for double posting but it is relevant here (I think!) and not sure cookes and GDPR has been covered.
This is an interesting one:
https://www.itgovernance.eu/blog/en/how-the-gdpr-affects-cookie-policies
as this implies you need to ask for consent BEFORE any cookies are set, and then ability to opt out of cookie collection! How does one achieve that?
and then you have this more recent one:
https://eugdprcompliant.com/cookies-consent-gdpr/
I've seen the ability to switch selected cookies on or off on a website before but does it require cutting edge technology to achieve this on an x-cart installation with third party cookies like Google analytics, affiliate tracking etc? Like this:
www.tuin.co.uk
(watch what happens it the top left hand side, it only lasts a few sexconds but gives you access to the cookie control on the website)