Exactly. And this doesn't surprise me.
The law states: if you collect more data than is strictly required for your site[1] to function and/or send user data to third parties, you have to:
- tell the users about it
- let the users to opt out, where opt out must be as easy as opt in
- if the users opt out, the site[1] must continue working
So yes, that site does send some extra data to third-parties, and informs the user about it. And lets the user know about it. IMO it shouldn't use third-party services, but oh well.
These days it's a source of my constant amazement that 8 years after its publication the people who complain about GDPR the most have not had even the tiniest attempt to read anything about it or understand anything about it.
[1] I simplified this to sites. GDPR is General Data Protection Regulation. All this equally applies to sites, apps, offline businesses, governments etc. To cookies, local storage, offline paper documents, tape records, cloud storage etc.
8 years. The law has been around for 8 years. It has been enforced for 6. It takes about half an hour to read the most relevant parts of it (chapters 1—5). An hour if you're not too familiar with legalese. And yet... "I don't know".
What is there to know? Nearly every website on the western internet has these cookie banners including the EU's own government sites.
The practical consequences of the laws are now apparent.
So what did we all miss that was hidden in the legalese?
Rarely do you see people flaunt their willful ignorance.
> Nearly every website on the western internet has these cookie banners
Well, since you approach is "I don't know and what is there to know", it's no surprise that the industry so easily sold you the lie of "the EU's laws are at fault"
> including the EU's own government sites.
Compare the banner on the site linked above and the usual dark patterns employed by the industry.
https://ec.europa.eu/commission/presscorner/detail/en/ip_24_...
If that site needs a cookie banner I'm guessing nearly all sites do.