[bruce511]

See Article 5(3). There is a specific carve-out for cookies that are used solely for essential site operation and security.