Broadly speaking, the user's consent is required whenever personal data is collected, processed or shared with third parties. The more specific general rule is as follows:
The usage of services not strictly necessary for delivering the service explicitly requested by the user requires the user's explicit and freely given consent. The consent must be given ere such services can be used. No user may be excluded of using a service for having declined the usage of not strictly necessary services.
That in turn means that no consent is required for any type of data storage, collection and processing that are strictly necessary for the services explicitly requested by the user. In that particular case, even a banner informing the user about the usage of cookies is not necessary. A visible link to a cookie or privacy policy describing the usage of cookies, data, etc. is sufficient in this case.
Strictly necessary cookies are:
These types of cookies require consent:
Further reading: