No. The GDPR does not mandate that website and application owners should use terms and conditions. However, the GDPR requires website owners to have a privacy policy.