No, they're in the clear. There is a very easy way to opt-out: you need to pay for a subscription to Spiegel. It's on the first page of their cookie dialog, you "just" have to log in. And give them your credit card number, if you haven't done so already.

The GDPR explicitly allows for this. Practically all of the old-school EU news orgs work like that nowadays.