Said notice must indicate:
However, if the cookie consent exemption does not apply - such as in connection with the use of third party cookies or tracking cookies - then the website operator must secure the user’s voluntary consent to the use of such cookies and must obtain separate consent relative to the use of each relevant cookie for the use of which consent is required. In such cases, the DPA will not accept the website operator’s bundling of consent, covering several cookies at the same time, because the DPA considers that consent bundling does not enable voluntary consent. Instead, the DPA suggests that the website operator should implement a consent mechanism providing separate checkboxes for each relevant cookie. The DPA guidance also underlines that the operator must obtain prior consent before placing each relevant cookie on the user’s end device. This means that the user may not have access to the relevant functionality before he/she has granted consent to the cookie used on that functionality.
The guidance says that the website operator must use inactive social media plug-ins and implement steps that restrict data transfers to social networks, unless the user explicitly consents to the transmission of the information to the social network, e.g. by sharing an article on a social media plug-in. This means that the user must activate the relevant plug-in after having received from the operator a notice about the scope of data collections and transfers, including whether behavioral information is collected and transmitted to third persons.