They don't have to offer a version of the website without consent. As long as they inform you that the site will use cookies if you use it that should be GDPR-compliant.