Consent
Consent is a freely given, informed and unambiguous agreement to a specific use of personal data. It is one possible legal basis for processing and can be withdrawn.
Published
What it means for your shop
Consent makes clear what a customer is saying yes to. Interest in your shop or saving a customer card answers a different question. Keep participation in the collecting programme separate from any other use of data you are planning. Holding a card is not blanket permission for marketing.
The requirements appear in Article 4(11) and Article 7 GDPR (German consolidated text). If you rely on consent, you must be able to demonstrate it. A written request must be clearly distinguishable from other matters and easy to understand. Customers must be able to withdraw consent as easily as they gave it, and must be told about this option beforehand.
How to recognise it
Imagine a customer asking: “What did I actually agree to?” Good documentation answers with the purpose at the time, the wording shown and the affirmative action taken. The date a card was created is useful, but it is not that evidence on its own. The same goes for a technical notification setting.
At Treubar
The privacy policy and DPA describe how Treubar processes data and who is responsible for what. Plan each purpose separately: the campaign feature is the tool, and for marketing messages you need a suitable legal basis, usually your guests’ consent, which you obtain separately; the feature itself does not replace it. Which basis and which marketing rules apply depends on the specific use.