(no title)
mziel | 8 years ago
It's not "consent" as understood by GPDR and ePrivacy. You had no recourse not to give it, therefore it was not willing and informed. Implied consent ("agree or leave") is not deemed sufficient by GDPR. According to the law you can't condition the service you're providing on collecting unrelated (to that service) data.
TomMarius|8 years ago
mziel|8 years ago
[1] http://eur-lex.europa.eu/eli/reg/2016/679/oj