No cookie consent walls, scrolling isn’t consent, says EU data protection body