In order to ensure that every data protection officer understands exactly what the data protection laws reflect and their legal obligations regarding GDPR compliance, the legislation contains seven data protection principles. These seven principles cover exactly how to process personal data.

In doing so, the GDPR ensures that the processing of personal data for which consent is sought cannot become directly or indirectly the counter-performance of a contract. The two lawful bases for the lawful processing of personal data, i.e. consent and contract cannot be …

Art. 7 GDPR Conditions for consent. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.

When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract.

Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.

Consent : The data subject shall provide a clear, specific and unambiguous consent. This essentially means that the data subject has clarity and transparency on the data collected and the purpose (s) for processing the data before giving the consent.

Article 7 GDPR regulates the "conditions for consent". It specifies the definition of consent set out in Article 4(11) GDPR and, by integrating Article 6(1)(a) GDPR , contributes to defining what legal requirements a valid consent should meet.