Description
This is an internal policy to be used by a business setting out the principles and legal conditions that the business must satisfy when ‘processing’ personal data in the course of its operations and activities based on ‘consent’ as a lawful basis under Article 6(1) (or Article 9(2)(a)). It is tailored to comply with the GDPR.
Consent must be freely given. If a controller relies on consent as the lawful basis for processing, data subjects must be able to choose to have their personal data processed and they must be able to withdraw their consent at any time. The data subject can withdraw the consent on which the processing is based according to Article 6(1) (or Article 9(2)(a)), and where there is no other legal ground for the processing.
Read our GDPR blog post to learn more and download our FREE GDPR Awareness Q&A Fact Sheet.