In Germany, this would be illegal without a very explicit opt-in. While the German data protection laws are stricter than the EU ones, this still surprises me to hear.
What are the chances that you accidentally "consented" in one of the myriad cookie popups clicked away each day?
None that would be lawfully binding. For stuff like this content must not be "surprising" or its void and courts interpret this very strictly.