Cookies set for storing expressed user preferences (e.g. language preferences) or for maintaining website security do not require consent.
Analytics cookies are exempt from the consent requirement provided that certain home page disclosure requirements are fulfilled, that the user can refuse use of analytics cookies, and that certain other criteria in terms of purpose limitation, access and data retention are also met.
In other words, analytics cookies, similar to necessary cookies, may run on the as soon as a user arrives. However, unlike necessary cookies, the user should be given the opportunity to opt-out.
Must receive opt-in consent prior to the cookies firing. The consent box must not