[ratherbefuddled]

Legitimate interest is a GDPR thing and you can indeed choose to share personal information under legitimate interest and you can do so for analytics. There are countless examples of privacy policies all over the web doing exactly that.

The ePrivacy directive is much more proscriptive about consent but applies only very narrowly - to cookies and similar technology.

Conflating GPDR and ePrivacy leads to much confusion, they are to all intents and purposes separate.