How do you obtain client consent to use their data for newsletters?

To use a person’s e-mail address for sending newsletters, the person must give their written consent, which can be presented in either paper or electronic form, e.g. on a website as a clickable option or as a confirmation e-mail indicating consent. It is important to note that before a person gives their consent, they have been provided with all information related to data processing required by the law.

• Name and contacts of the company processing personal data.
• The purpose of personal data processing (by listing all companies that will prepare the newsletters).
• The legal basis for data processing (the processing will be solely performed on the basis of person’s given consent).
• The contacts of the data protection specialist (if a specialist is employed).
• Persons and companies to which the collected personal data will be handed over.
• Information on whether personal data will be sent to a third country or an international organisation, and information on whether there is a ruling by the Commission about the sufficiency of data protection.
• The time frame of storing personal data or – if it impossible to determine – the criteria according to which this time frame will be set.
• Information that a person has the right to request to access, erase or limit the processing of their data, as well as the right to object to processing, and data transfer.
• Information that a person has the right to withdraw consent in any moment.
• The right to make a complaint to a supervising body.
• Whether the data subject has the obligation to provide their personal data and what consequences of not providing data might be (if the sole purpose of data processing is the sending of newsletters, the person is not obliged to provide their personal data, and the only consequences for the subject will be not receiving the newsletter).

useful:

SQUALIO recommendations for preparing for GDPR.