They don’t have to ask for cookies permission, just like they don’t have to ask for sending you JavaScript code (but should) or CSS styles. What they have to do is ask for permission for collecting personal data or sending it to third-parties. That’s all.