Hi @capte,
The Google Analytics tags which create those cookies are being fired from your GTM container, but they currently do not wait for consent to be obtained; and as a result the cookies are also set without consent.
There are a number of approaches to solve that:
1) Google Consent Mode (Premium, Recommended)
When using the Complianz Premium plugin, you can follow the steps under “Configuring Google Tags with Tag Manager” in this article to implement Consent Mode V2 for GTM. Google will then restrict or allow Google tag functionalities based on the provided consent in Complianz.
2) Fire tags based on consent using Complianz triggers/events
By following the steps in this article under (Step-by-step) Firing tags based on consent in Tag Manager, you can configure your Google Tags to fire on a Complianz consent event/trigger (such as Statistics consent), instead of your current trigger, which does not wait for consent to be obtained.
3) Block Google Tag Manager entirely before consent
If you’d rather block Tag Manager entirely before consent, thereby blocking all of the tags that it contains as well, you can implement the GTM script manually as described here: https://complianz.io/how-to-set-google-tag-manager-after-consent-and-is-it-needed/
Kind regards, Jarno