Elaboration: consent according to the GDPR law

etimoni11223344

According to the GDPR, the General Data Protection Regulation, consent means that it is voluntary, specific, informed and unequivocal approval on the part of the data subject regarding the processing of their personal data. Consent can be given through written, electronic or oral statements. Pre-filled checkboxes or similar solutions are not permitted under the GDPR. Read on for a more in-depth understanding of consent under the GDPR

What is actually meant by consent being voluntary?
This means that the data subject must have a clear and obvious opportunity Phone Number List to refuse to give their consent. If the consent is not voluntary, it is considered invalid. Therefore, it is not permitted to have pre-filled squares or similar solutions.

How does it work if a consent covers several different purposes?
If you collect personal data for widely different purposes, consent must be obtained for each specific purpose. For example, if you collect email addresses to send out a newsletter about running and then decide to create a newsletter with a sailing theme, you will need to obtain a new consent for the sailing newsletter. The people on your mailing list have not agreed to subscribe to sailing news. Therefore, it is important to clearly state what the customer agrees to. This should also be stated in the confirmation of consent.

What information must be included for valid consent?
Consent must be clearly specified. You must clearly inform about the processing that will be carried out and for what purpose you and your company will use the personal data. Any company, organization or industry that stores or handles personal information about its employees or customers must also identify itself to the data subject before the data subject gives consent.

The following information must be included when requesting consent:



The purpose(s) of the processing of the data subject's personal data.
What personal data will be processed upon consent.
Your or your company's name, address, telephone number, organization number and email address, as well as names of any recipients or parties who will have access to the personal data.
Contact details of any data protection ombudsman, if your company has appointed one.
Information about your obligation to disclose personal data if the data subject requests it.
Information about the data subject's right to request correction of their personal data.
Information about the data subject's right to withdraw his consent and how he can do so.
Information about the registrant's right to be forgotten and how he can request this.
What protective measures are taken and how the data subject can obtain a copy or know where the information is available, if you or your company or other recipients of the personal data intend to transfer them to someone outside the EU.
When consent ceases to apply.
It's better to ask an extra time if you're not sure than not to ask enough. Also remember that it must always be clear what the data subject is consenting to. If the processing has several different purposes, these must be clearly specified and consent must be obtained for each purpose.