Hello,
Our theme meets all the rules and requirements for the data protection (GDPR). In general, almost all the data on your website are stored and processed by WordPress core, WooCommerce plugin and other plugins installed that store or process visitors data in any way. So to make your website ready for GDPR you have to update the WordPress to the version 4.9.6 and WooCommerce to 3.4. Read more information about those updates and GDPR options in WordPress documentation and in WooCommerce development blog. https://xtemos.com/docs/basel/faq-guides-2/gdpr-compliant/
You can deactivate the plugin iubenda Cookie Solution for GDPR
You can configure the COOKIE LAW INFO in the Theme Settings > Shop > COOKIE LAW INFO
P.S.
Please deactivate and delete these plugins: Redux Framework, CMB2, they are no more required. https://xtemos.com/docs/basel/faq-guides-2/4-x-5-0-migration-guide/ they may cause problems in the future.
Best Regards