I agree most of these don't appear necessary, have you thought to contact the DPO, wait 28 days and if no suitable response, contact the ICO?
Also, do you have a link to the EU court guidance?
From what I've read before, some functionally necessary and expected cookies don't need consent, but the user may have a right to be informed.
For instance, a login cookie might be fine, but arguably only if you have logged in - if it remains after you've logged out then that's a bit worrying.
Also, do you have a link to the EU court guidance?
From what I've read before, some functionally necessary and expected cookies don't need consent, but the user may have a right to be informed.
For instance, a login cookie might be fine, but arguably only if you have logged in - if it remains after you've logged out then that's a bit worrying.