{"id":33367,"date":"2025-04-07T10:01:55","date_gmt":"2025-04-07T08:01:55","guid":{"rendered":"https:\/\/mailcommsgroup.com\/?p=33367"},"modified":"2026-08-24T09:22:43","modified_gmt":"2026-08-24T07:22:43","slug":"life-cycle-of-consent-rgpd","status":"publish","type":"post","link":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/","title":{"rendered":"GDPR consent lifecycle: collection, custody and withdrawal (cancellation)"},"content":{"rendered":"

[vc_row type=”grid” css=”.vc_custom_1547557263471{margin-bottom: 0px !important;padding-bottom: 0px !important;}”][vc_column dp_animation=”” el_class=”El nuevo reglamento europeo obliga a recabar el consentimiento expl\u00edcito para el tratamiento de los datos de car\u00e1cter personal” font_color=”#81d742″][vc_single_image image=”33910″ img_size=”full” css=””][\/vc_column][\/vc_row][vc_row type=”grid” css=”.vc_custom_1679050935288{margin-top: 0px !important;padding-top: 0px !important;}”][vc_column dp_animation=”” css=”.vc_custom_1547557427896{padding-top: 0px !important;}”][vc_empty_space height=”80px” css=”.vc_custom_1742553516084{margin-top: -70px !important;}”][vc_column_text css=”.vc_custom_1787555746507{padding-top: 50px !important;padding-right: 50px !important;padding-bottom: 50px !important;padding-left: 50px !important;background-color: #F2F2F2 !important;}” dp_animation=””]Table of Contents <\/strong><\/span><\/p>\n

    \n
  1. Collection of consent (multichannel)<\/a><\/li>\n
  2. Custody of consent<\/a><\/li>\n
  3. Withdrawal of consent (cancellation)<\/a><\/li>\n
  4. Special attention to the collection of consent for cookies.<\/a><\/li>\n
  5. Advertising exclusion lists<\/a><\/li>\n
  6. Frequently Asked Questions<\/a><\/li>\n<\/ol>\n

    [\/vc_column_text][vc_empty_space height=”110px” css=”.vc_custom_1743758620561{margin-top: -100px !important;}”][vc_column_text css=”” dp_animation=””]Consent under the GDPR<\/a> is a fundamental pillar of personal data management, especially in the context of the General Data Protection Regulation (GDPR), as we have discussed in previous articles in this series.<\/p>\n

    Article 4.11 of the GDPR<\/a><\/strong> defines it as follows: “consent of the data subject”: means any freely given, specific, informed and unambiguous indication of his or her wishes by which the data subject signifies his or her agreement, either by a statement or by a clear affirmative action, to the processing of personal data relating to him or her.<\/p>\n

    In other words, the consent given must be free, specific, informed and unequivocal.<\/p>\n

    The GDPR consent lifecycle consists of three phases: collection, retention, and withdrawal.[\/vc_column_text][vc_column_text css=”” dp_animation=””]<\/p>\n\n\n\n\n\n\n\n
    Phase<\/th>\nDescription<\/th>\nKey Obligations<\/th>\nLegal Basis: GDPR<\/th>\n<\/tr>\n<\/thead>\n
    1. Collection<\/strong><\/td>\nObtaining the data subject\u2019s consent in a free, specific, informed, and unambiguous manner<\/td>\nMultichannel, separately for each purpose, without pre-checked boxes, verifiable<\/td>\nArt. 4.11 and Art. 7.1<\/td>\n<\/tr>\n
    2. Custody<\/strong><\/td>\nSecure and traceable storage of obtained consent<\/td>\nRecord including date, channel, and purpose; accessible during audits; protected against unauthorized access<\/td>\nArt. 5.2 and Art. 7.1<\/td>\n<\/tr>\n
    3. Withdrawal<\/strong><\/td>\nWithdrawal of consent at the request of the data subject<\/td>\nJust as simple as granting consent; confirmation to the user; immediate cessation of processing; updating of records<\/td>\nArt. 7.3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    [\/vc_column_text][vc_empty_space height=”120px” css=”.vc_custom_1743758622961{margin-top: -100px !important;}” el_id=”uno”][vc_column_text css=”.vc_custom_1743756962353{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}” dp_animation=””]<\/p>\n

    Phase 1: Multichannel Collection of GDPR Consent <\/strong><\/span><\/h2>\n

    [\/vc_column_text][vc_column_text css=”” dp_animation=””]The collection of consent, as we have indicated above, must be a free, specific, informed and unambiguous action. And it will be up to the controller to demonstrate that the data subject consented to the processing of the data. This means, among other things, that data controllers (i.e. both natural and legal persons) must safeguard the collection of consent. <\/p>\n

    Regarding the manner of obtaining consent, the entities responsible for the processing will have to offer multiple channels for users to give their consent. In other words, they will adapt to the preferences and needs of the persons concerned. Some common channels are: <\/p>\n