Article 4 - Definitions"11) «consent» of the data subject means any
unambiguous indication of the data subject's wishes by which he or she,
by a statement or
by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;"
Article 7 - Conditions for consent"2. If the data subject's consent is given in the context of a written declaration which also concerns other matters,
the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an
easily accessible form, using
plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding."
"The data subject shall have
the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.
It shall be as easy to withdraw as to give consent."
Article 6, 3. The basis for the processing referred shall be laid down by: (a) Union law; or
(b) Member State law to which the controller is subject.
"That legal basis may contain specific provisions to adapt the application of rules of this Regulation, inter alia: the general conditions governing the lawfulness of processing by the controller; the types of data which are subject to the processing; the data subjects concerned; the entities to, and the purposes for which, the personal data may be disclosed; the purpose limitation; storage periods; and processing operations and processing procedures, including measures to ensure lawful and fair processing such as those for other specific processing situations as provided for in Chapter IX. The Union or the Member State law shall meet an objective of public interest and be proportionate to the legitimate aim pursued."