Are they targeting EU citizens or doing business in the EU? If not why would the bother trying to be “compliant”
On the other hand why do they want to steal your personal data?
On the other hand why do they want to steal your personal data?
If the shop specifically targets eu customers that’s different. If the shop offered bagel drivers to France for example.
Either way the GDPR basically says “don’t steal people’s data”. Ther is no reason to have cookie banners unless you want to take personal data, and the easy solution to that is to not take personal data.