You do collect data such as IP addresses if you use Google Analytics. It’s for your site. They may be hosting that data, but you are the one that signed up for that program and personally I received a bunch of emails from them and others so I’d be surprised if you didn’t.

I wouldn’t recommend endorsing whether third parties are GDPR compliant (i.e., we assure these parties are strictly GDPR compliant). Especially if you do not know that answer yourself. Not trying to be harsh at all - just my opinion.

And outside that specific law I’d have an issue if I knew a site said they assured other services were compliant when they are asking about it.

That being said, there are an annoying amount of pop ups right now on sites that if you check a few you’ll probably notice follow similar language. Not saying it’s always right but you have a ton of examples to look at.