Cookie banner: mandatory or not?

A banner is not an end in itself. What matters is whether a site accesses the device or embeds services that are not strictly necessary.

Is this a risk?

Under § 25 (1) TDDDG, any access to the device that is not strictly necessary requires prior consent. Only strictly necessary operations (§ 25 (2)) are exempt. A banner that loads trackers despite “Reject” or hides “Reject” does not meet the requirements.

What you can do

• Check which services are really technically necessary — only these without consent.
• If nothing consent-requiring is embedded: no banner needed.
• Otherwise use a consent tool that makes rejecting as easy as accepting and loads services only after agreement.
• After setup, test whether nothing consent-requiring actually loads after “Reject”.

How consentglass helps

The free scan checks the delivered HTML and shows which services are embedded, whether a cookie banner is detected and whether privacy-policy and legal-notice links are present — with context for each finding. It is not a substitute for legal advice.