Consent
The controller must be able to demonstrate consent, which, if given in writing, must be provided in an intelligible and easily accessible form and formulated in clear and plain language.
If consent has been given, the processing is lawful for the purposes defined therein and only for these purposes. If the purposes defined in the consent change, the compatibility of these purposes must be checked and, if necessary, new consent must be obtained.
If consent was given in the context of a contract, a voluntary assessment must be made regarding the necessity of processing the requested personal data (prohibition of tying).
The data subject has the right to withdraw consent at any time, and the controller must inform the data subject of this in accordance with the duty to provide information when consent is given. If consent is withdrawn, the previous processing remains lawful, but all data processed on the basis of the consent must be deleted. Exception: The processing was based on a different legal basis from the outset.
If the consenting person is a minor, the processing of the child's personal data is only lawful if the child has reached the age of sixteen or consent has been given by the holder of parental responsibility over the child. The controller is obliged to make reasonable efforts to monitor this.
Related Comments
#6, #13
Based On
Art. 4 Nr. 11
Art. 6 Para. 1 lit. a
Art. 7
Art. 8
References
Consent
Coupling Prohibition
Obligation to Inform
Accountability
Purpose
Consent
The controller must be able to demonstrate consent, which, if given in writing, must be provided in an intelligible and easily accessible form and formulated in clear and plain language.
If consent has been given, the processing is lawful for the purposes defined therein and only for these purposes. If the purposes defined in the consent change, the compatibility of these purposes must be checked and, if necessary, new consent must be obtained.
If consent was given in the context of a contract, a voluntary assessment must be made regarding the necessity of processing the requested personal data (prohibition of tying).
The data subject has the right to withdraw consent at any time, and the controller must inform the data subject of this in accordance with the duty to provide information when consent is given. If consent is withdrawn, the previous processing remains lawful, but all data processed on the basis of the consent must be deleted. Exception: The processing was based on a different legal basis from the outset.
If the consenting person is a minor, the processing of the child's personal data is only lawful if the child has reached the age of sixteen or consent has been given by the holder of parental responsibility over the child. The controller is obliged to make reasonable efforts to monitor this.
Related Comments
#6, #13
Based On
Art. 4 Nr. 11
Art. 6 Para. 1 lit. a
Art. 7
Art. 8
References
Consent
Coupling Prohibition
Obligation to Inform
Accountability
Purpose