GDPR is not about cookies, and what data do you mean? The data about how you use the site, tied to anything they can identify you with?