Why a Simple Opt-Out Is No Longer Enough
In 2019, the European Court of Justice ruled that internet users must actively consent to the setting of non-essential cookies (opt-in). The previously common notice with a link to later deactivate cookies (opt-out) has since no longer been sufficient and violates the GDPR.
Technically essential cookies – for example for a shopping cart, checkout process or login – are exempt from the consent requirement. For tracking, marketing and other third-party cookies, however, the opt-in requirement applies without exception.