If the cookies are nessecary for the site to technically function, you don’t need to be promoted to accept. The law - which doesn’t even mention cookies - allows the absolute minimum amount of data required to provide a service to be gathered. For a website, that included cookies for storing preferences, shopping baskets, login tokens, etc.