Yes. However, there are some types of cookies that are exempt from the requirement to obtain consent but these are limited to two specific uses.

The types of cookies that are exempt from the need to get user consent are:

1. Strictly necessary exemption – cookies that are strictly necessary in order to provide the information society service explicitly requested by the user. These include cookies such as the ones that allow an online shopping cart to remember the items the user has placed in it.

2. Communication exemption – cookies that are used for the sole purpose of carrying out the transmission of a communication over an electronic communications network. These include cookies such as load balancing session cookies that allow the distribution of web traffic over different servers.

Cookies that are not exempt from the requirement to obtain consent include cookies for targeted advertising and conversion tracking.

Users must be able to withdraw or vary their consent for the use of cookies or tracking technologies at any time and you must make it clear how they may do this using the tools you have provided to manage consent. It must be as easy for a user to withdraw their consent as to give it – this means they should not have to spend time searching on a website or in an app for a way to withdraw their consent.