Must I allow users to withdraw their consent?

ANSWER

Yes.

Consent to the processing of personal data may be withdrawn at any time by the data subject, and withdrawing consent must be as easy as giving it.

If consent was obtained through a cookie banner or pop-up window, it cannot be stipulated that consent may only be withdrawn, for example, by changing the browser settings.

The best practice is to provide an easily accessible button or link on the website that allows users to withdraw their consent at any time.