[dhx]

§66 on page 20 of Directive 2009/136/EC at [1] uses the word "information", not "cookies".

  Third parties may wish to store information on the
  equip­ment of a user, or gain access to information
  already stored, for a number of purposes, ranging
  from the legiti­mate (such as certain types of
  cookies) to those involving unwarranted intrusion
  into the private sphere (such as spy­ware or
  viruses). It is therefore of paramount importance
  that users be provided with clear and comprehensive
  infor­mation when engaging in any activity which
  could result in such storage or gaining of access.

The purpose of the directive is to be as broad as possible to cover collection of any type of information without express permission or "strictly necessary and legitimate purpose".

[1] http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2...