Earlier quoted context omitted.
I have some excellent news for you about the legality of targeted advertising under the GDPR. The GDPR is very clear about this. Advertising is not a legitimate interest or a functionally-required data processing, ergo, it may only be done with user consent. And that user consent may not be coerced in any way at all , you may not even refuse access to services if users reject their data being used. It's taking a whil…
Good intentions but how well is that working out so far? Only thing we got was annoying cookie popups everywhere, where consent is one click away and reject is three layers behind a small “learn more” button.
Guess what, the whole hidden reject thing? That's not legal. Opting out should be equally as easy (or easier) than opting in, which a lot of EU companies realize.