{"id":33367,"date":"2025-04-07T10:01:55","date_gmt":"2025-04-07T08:01:55","guid":{"rendered":"https:\/\/mailcommsgroup.com\/?p=33367"},"modified":"2025-08-27T11:16:45","modified_gmt":"2025-08-27T09:16:45","slug":"life-cycle-of-consent-rgpd","status":"publish","type":"post","link":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/","title":{"rendered":"GDPR consent lifecycle: collection, custody and withdrawal (cancellation)"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row type=&#8221;grid&#8221; css=&#8221;.vc_custom_1547557263471{margin-bottom: 0px !important;padding-bottom: 0px !important;}&#8221;][vc_column dp_animation=&#8221;&#8221; el_class=&#8221;El nuevo reglamento europeo obliga a recabar el consentimiento expl\u00edcito para el tratamiento de los datos de car\u00e1cter personal&#8221; font_color=&#8221;#81d742&#8243;][vc_single_image image=&#8221;33909&#8243; img_size=&#8221;full&#8221; css=&#8221;&#8221;][\/vc_column][\/vc_row][vc_row type=&#8221;grid&#8221; css=&#8221;.vc_custom_1679050935288{margin-top: 0px !important;padding-top: 0px !important;}&#8221;][vc_column dp_animation=&#8221;&#8221; css=&#8221;.vc_custom_1547557427896{padding-top: 0px !important;}&#8221;][vc_empty_space height=&#8221;80px&#8221; css=&#8221;.vc_custom_1742553516084{margin-top: -70px !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1743756905237{padding-top: 50px !important;padding-right: 50px !important;padding-bottom: 50px !important;padding-left: 50px !important;background-color: #F2F2F2 !important;}&#8221; dp_animation=&#8221;&#8221;]<span style=\"font-size: 20px;\"><strong>Table of Contents  <\/strong><\/span><\/p>\n<ol>\n<li><a href=\"#uno\">Collection of consent (multichannel)<\/a><\/li>\n<li><a href=\"#dos\">Custody of consent<\/a><\/li>\n<li><a href=\"#tres\">Withdrawal of consent (cancellation)<\/a><\/li>\n<li><a href=\"#cuatro\">Special attention to the collection of consent for cookies.<\/a><\/li>\n<li><a href=\"#cinco\">Advertising exclusion lists<\/a><\/li>\n<\/ol>\n<p>[\/vc_column_text][vc_empty_space height=&#8221;110px&#8221; css=&#8221;.vc_custom_1743758620561{margin-top: -100px !important;}&#8221;][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]Consent is a fundamental pillar in the management of personal data, especially in the context of the General Data Protection Regulation (GDPR), as we have discussed in previous articles in this series.<\/p>\n<p>Article 4.11 of the <strong><a href=\"https:\/\/www.boe.es\/doue\/2016\/119\/L00001-00088.pdf\">GDPR<\/a><\/strong> defines it as follows: &#8220;consent of the data subject&#8221;: means any freely given, specific, informed and unambiguous indication of his or her wishes by which the data subject signifies his or her agreement, either by a statement or by a clear affirmative action, to the processing of personal data relating to him or her.<\/p>\n<p>In other words, the consent given must be free, specific, informed and unequivocal.<\/p>\n<p>Next, we explore the three key phases of the consent lifecycle: collection, custody and withdrawal.[\/vc_column_text][vc_empty_space height=&#8221;120px&#8221; css=&#8221;.vc_custom_1743758622961{margin-top: -100px !important;}&#8221; el_id=&#8221;uno&#8221;][vc_column_text css=&#8221;.vc_custom_1743756962353{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}&#8221; dp_animation=&#8221;&#8221;]<\/p>\n<h2 style=\"margin-top: 0;\"><span style=\"color: #000000;\"><strong>Collection of consent (multichannel)<\/strong><\/span><\/h2>\n<p>[\/vc_column_text][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]The collection of consent, as we have indicated above, must be a free, specific, informed and unambiguous action. And it will be up to the controller to demonstrate that the data subject consented to the processing of the data. This means, among other things, that data controllers (i.e. both natural and legal persons) must safeguard the collection of consent.  <\/p>\n<p>Regarding the manner of obtaining consent, the entities responsible for the processing will have to offer multiple channels for users to give their consent. In other words, they will adapt to the preferences and needs of the persons concerned. Some common channels are:  <\/p>\n<ul>\n<li><strong>Web forms:<\/strong> allow users to give their consent by completing them online.<\/li>\n<li><strong>E-mail:<\/strong> through e-mail marketing campaigns, where explicit consent is requested.<\/li>\n<li><strong>SMS \/ WhatsApp:<\/strong> text messages requesting users&#8217; consent.<\/li>\n<li><strong>Mobile applications:<\/strong> the application is carried out from a mobile APP.<\/li>\n<li><strong>Face-to-face:<\/strong> through physical forms that users can sign in person.<\/li>\n<\/ul>\n<p>The regulation establishes as mandatory that the consent must be explicit, informed and freely given. Furthermore, it must be specific for each purpose of data processing. This means that it is not valid to collect a single consent for a multitude of purposes, but that each purpose requires a specific consent.  <\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-33373 pd-t-10\" src=\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/trabajadores-usando-ordenador.webp\" alt=\"Workers using computers\" width=\"892\" height=\"418\" srcset=\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/trabajadores-usando-ordenador.webp 892w, https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/trabajadores-usando-ordenador-300x141.webp 300w, https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/trabajadores-usando-ordenador-768x360.webp 768w\" sizes=\"auto, (max-width: 892px) 100vw, 892px\" \/>[\/vc_column_text][vc_empty_space height=&#8221;120px&#8221; css=&#8221;.vc_custom_1743758627318{margin-top: -100px !important;}&#8221; el_id=&#8221;dos&#8221;][vc_column_text css=&#8221;.vc_custom_1743757061574{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}&#8221; dp_animation=&#8221;&#8221;]<\/p>\n<h2 style=\"margin-top: 0;\"><span style=\"color: #000000;\"><strong>Custody of consent<\/strong><\/span><\/h2>\n<p>[\/vc_column_text][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]Once obtained, the consent must be securely stored and accessible by the data controller. This implies: <\/p>\n<ul>\n<li><strong>Secure storage:<\/strong> consents will be stored in secure systems that protect the information against unauthorized access and security breaches.<\/li>\n<li><strong>Traceability:<\/strong> it is essential to keep a detailed record of when, how and for what purpose consent was obtained. This includes, at a minimum, the date, the channel used and the specific purpose. <\/li>\n<li><strong>Accessibility:<\/strong> records must be easily consultable in subsequent reviews or audits. This is essential to demonstrate compliance with the GDPR in case of inspections or litigation. <\/li>\n<\/ul>\n<p>[\/vc_column_text][vc_empty_space height=&#8221;120px&#8221; css=&#8221;.vc_custom_1743758631249{margin-top: -100px !important;}&#8221; el_id=&#8221;tres&#8221;][vc_column_text css=&#8221;.vc_custom_1743757368802{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}&#8221; dp_animation=&#8221;&#8221;]<\/p>\n<h2 style=\"margin-top: 0;\"><span style=\"color: #000000;\"><strong>Withdrawal of consent (cancellation)<\/strong><\/span><\/h2>\n<p>[\/vc_column_text][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]Article 7.3 of the GDPR gives individuals the right to withdraw their consent at any time, and requires that it be as easy to give consent as it is to cancel it. Organizations need to build this process in a way that is convenient and free of charge. The design will include:  <\/p>\n<ul>\n<li><strong>Multiple withdrawal channels:<\/strong> multiple channels for users to withdraw their consent, such as web forms, emails, SMS or mobile applications, among other possibilities.<\/li>\n<li><strong>Confirmation:<\/strong> after withdrawal, the organization has to issue a confirmation and cease any data processing based on that consent.<\/li>\n<li><strong>Updating records:<\/strong> it is critical that consent records are updated to reflect the withdrawal and to ensure that user data is no longer used for the purposes previously consented to.<\/li>\n<\/ul>\n<p>Withdrawal of consent will not affect the processing carried out on the basis of consent prior to its withdrawal.[\/vc_column_text][vc_empty_space height=&#8221;120px&#8221; css=&#8221;.vc_custom_1743758634913{margin-top: -100px !important;}&#8221; el_id=&#8221;cuatro&#8221;][vc_column_text css=&#8221;.vc_custom_1743757876353{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}&#8221; dp_animation=&#8221;&#8221;]<\/p>\n<h2 style=\"margin-top: 0;\"><span style=\"color: #000000;\"><strong>Special attention to the collection of consent for cookies.<\/strong><\/span><\/h2>\n<p>[\/vc_column_text][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]Cookies are text files that websites send to the browser to store information about a user&#8217;s visit. This allows websites to remember user preferences and provide a more personalized experience. In order to be activated, the user must give their consent.  <\/p>\n<p><strong>The Law of Information Society Services and Electronic Commerce (LSSI)<\/strong> regulates the use of <em>cookies<\/em> in Spain.<\/p>\n<p>Although it does not mention them directly, Article 22.2 of the LSSI states: <em>&#8220;Service providers may use data storage and retrieval devices on users&#8217; terminal equipment, provided that they have obtained their consent after providing clear and complete information about their use&#8221;.<\/em><\/p>\n<p>These are the most important points of the LSSI regarding the regulation of cookies:<\/p>\n<ol>\n<li><strong>Duty to inform:<\/strong> companies have to inform in a clear and understandable way about the use of <em>cookies:<\/em> their purpose, duration and who owns them, especially if they are from third parties.<\/li>\n<li><strong>Obtaining consent:<\/strong> before installing <em>cookies<\/em> on the user&#8217;s device, companies must obtain the user&#8217;s explicit consent as indicated in Article 7 of the GDPR. This is usually done by means of banners or pop-ups requesting acceptance. <\/li>\n<li><strong>Exceptions:<\/strong> some cookies, such as technical cookies, which are necessary for navigation or to provide a service requested by the user, are exempt from the obligation to obtain consent.<\/li>\n<\/ol>\n<p>Most websites, applications and online platforms use these small code files to improve the browsing experience and\/or to collect different types of personal information from users. It is therefore important to follow the following steps for the correct management of consent: <\/p>\n<ol>\n<li><strong>Transparency:<\/strong> clear information to users about what cookies are, how they are used and for what purpose. This should include an accessible and understandable policy. <\/li>\n<li><strong>Explicit consent:<\/strong> obtain explicit consent from users before using <em>cookies<\/em> that are not strictly necessary for the operation of the website.<\/li>\n<li><strong>Configuration options:<\/strong> provide users with the option to accept or reject different types of cookies, such as performance, functional or advertising cookies.<\/li>\n<li><strong>Record of consent:<\/strong> keep a record of the consent given by users including the date, time and type of cookies accepted.<\/li>\n<li><strong>Revocation of consent:<\/strong> allow users to revoke their consent at any time and provide clear instructions on how to do so.<\/li>\n<li><strong>Updating the cookie policy:<\/strong> periodically review and update the cookie policy to reflect any changes in its use or applicable regulations, among other issues.<\/li>\n<\/ol>\n<p>The Spanish Data Protection Agency (AEPD) publishes additional guidelines and directives on the use of<em> cookies<\/em> to ensure compliance with the regulations, and even uses some examples of how some of the above points should be carried out.[\/vc_column_text][vc_empty_space height=&#8221;120px&#8221; css=&#8221;.vc_custom_1743758639576{margin-top: -100px !important;}&#8221; el_id=&#8221;cinco&#8221;][vc_column_text css=&#8221;.vc_custom_1743758376085{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}&#8221; dp_animation=&#8221;&#8221;]<\/p>\n<h2 style=\"margin-top: 0;\"><span style=\"color: #000000;\"><strong>Advertising exclusion lists<\/strong><\/span><\/h2>\n<p>[\/vc_column_text][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]Advertising opt-out lists are voluntary systems in which individuals can register to avoid receiving unwanted commercial communications from companies with which there is no contractual relationship.<\/p>\n<p>There are currently two advertising exclusion lists: <strong>the Robinson List and the Stop Advertising List (newly created).<\/strong><\/p>\n<p><strong>The companies that carry out commercial actions must exclude those persons who have registered in any of the two lists,<\/strong> that is, in those cases in which the person has consented not to receive this type of communications. They may contact those who are not registered. Consent must be obtained in accordance with article 7 of the RGPD (free, specific, informed and unequivocal), in addition to being given through a channel that allows a record of its collection.  <\/p>\n<p>However, <strong>anyone who has signed up for an advertising opt-out list may receive advertising from a company if he or she is a customer or if he or she has previously given his or her explicit consent<\/strong>. For example, by making a purchase from a company and agreeing to receive information about similar products, that company may send commercial communications even if the user has signed up for one of these opt-out lists.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-33376 pd-t-10\" src=\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/persona-usando-tablet.webp\" alt=\"Person using tablet\" width=\"892\" height=\"418\" srcset=\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/persona-usando-tablet.webp 892w, https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/persona-usando-tablet-300x141.webp 300w, https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/persona-usando-tablet-768x360.webp 768w\" sizes=\"auto, (max-width: 892px) 100vw, 892px\" \/>[\/vc_column_text][vc_empty_space height=&#8221;120px&#8221; css=&#8221;.vc_custom_1743758642654{margin-top: -100px !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1743758454472{padding-top: 15px !important;padding-right: 15px !important;padding-bottom: 15px !important;padding-left: 15px !important;background-color: #47d7ac !important;}&#8221; dp_animation=&#8221;&#8221;]<\/p>\n<h2 style=\"margin-top: 0;\"><span style=\"color: #000000;\"><strong>Conclusion<\/strong><\/span><\/h2>\n<p>[\/vc_column_text][vc_column_text css=&#8221;&#8221; dp_animation=&#8221;&#8221;]<strong>Effective consent lifecycle management is essential to comply with data protection regulations, avoid fines, reputational risks and maintain user trust. The consent lifecycle includes multi-channel collection, secure storage and easy opt-out. <\/strong>  And transparency and regulatory compliance must be ensured at every stage.<\/p>\n<p>For all these reasons, <strong>companies need to have improved and mature consent management processes in place and to rely on<\/strong> <strong><a href=\"https:\/\/mailcommsgroup.com\/en\/regulatory-compliance-solutions\/rgpd-consent-management\/\">technology solutions,<\/a><\/strong> <strong>such as MailComms Group&#8217;s, to help them manage the entire process, ensure compliance and avoid penalties.<\/strong><\/p>\n<p>And for this <strong>compliance, it is very helpful to have a<\/strong> qualified and trusted e-service <strong><a href=\"https:\/\/mailcommsgroup.com\/en\/blog\/we-are-a-trusted-service-provider-qualified-in-electronic-delivery-certified-do-you-want-to-know-what-means\/\">qualified and trustworthy electronic service provider,<\/a><\/strong> such as ours. In addition, we are certified in the main information security and privacy regulations, such as: ISO\/IEC 27001 and ISO\/IEC 27701, to which we add our accreditation in the<strong><a href=\"https:\/\/mailcommsgroup.com\/en\/blog\/new-level-ens\/\"> high level category in the National Security Scheme.<\/a><\/strong> <\/p>\n<p>If you would like to learn about one of the most robust consent management systems on the market, we invite you to contact us.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>According to the regulation, GDPR consent has a lifecycle that includes collection, custody, as well as withdrawal. And each of these steps has to be carried out in a certain way. We invite you to read a new article in our GDPR series.  <\/p>\n","protected":false},"author":14,"featured_media":33910,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[480],"class_list":["post-33367","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-communication-solutions-with-legal-value"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GDPR consent lifecycle<\/title>\n<meta name=\"description\" content=\"According to the regulation, GDPR consent has a life cycle that includes collection, storage and withdrawal.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR consent lifecycle\" \/>\n<meta property=\"og:description\" content=\"According to the regulation, GDPR consent has a life cycle that includes collection, storage and withdrawal.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\" \/>\n<meta property=\"og:site_name\" content=\"Mailcomms Group\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-07T08:01:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-27T09:16:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"892\" \/>\n\t<meta property=\"og:image:height\" content=\"623\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Soraya de Caso\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@CommsCustomer\" \/>\n<meta name=\"twitter:site\" content=\"@CommsCustomer\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Soraya de Caso\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\"},\"author\":{\"name\":\"Soraya de Caso\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#\/schema\/person\/0e11af8f964ebe83d2e307aefc7f323b\"},\"headline\":\"GDPR consent lifecycle: collection, custody and withdrawal (cancellation)\",\"datePublished\":\"2025-04-07T08:01:55+00:00\",\"dateModified\":\"2025-08-27T09:16:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\"},\"wordCount\":1846,\"publisher\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp\",\"articleSection\":[\"Communication solutions with legal value\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\",\"url\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\",\"name\":\"GDPR consent lifecycle\",\"isPartOf\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp\",\"datePublished\":\"2025-04-07T08:01:55+00:00\",\"dateModified\":\"2025-08-27T09:16:45+00:00\",\"description\":\"According to the regulation, GDPR consent has a life cycle that includes collection, storage and withdrawal.\",\"breadcrumb\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage\",\"url\":\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp\",\"contentUrl\":\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp\",\"width\":892,\"height\":623,\"caption\":\"Consentimiento rgpd\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Mailcomms Group\",\"item\":\"https:\/\/mailcommsgroup.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\/\/mailcommsgroup.com\/en\/blog\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"GDPR consent lifecycle: collection, custody and withdrawal (cancellation)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#website\",\"url\":\"https:\/\/mailcommsgroup.com\/en\/\",\"name\":\"MailComms Group\",\"description\":\"La transformaci\u00f3n digital a trav\u00e9s de la comunicaci\u00f3n omnicanal, con plena validez legal.\",\"publisher\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#organization\"},\"alternateName\":\"MailComms Group\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/mailcommsgroup.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#organization\",\"name\":\"MailComms Group - Soluciones de comunicaci\u00f3n omnicanal con validez legal.\",\"alternateName\":\"MailComms Group\",\"url\":\"https:\/\/mailcommsgroup.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2023\/05\/icon_mini_mailcommsgroup.png\",\"contentUrl\":\"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2023\/05\/icon_mini_mailcommsgroup.png\",\"width\":512,\"height\":512,\"caption\":\"MailComms Group - Soluciones de comunicaci\u00f3n omnicanal con validez legal.\"},\"image\":{\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/CommsCustomer\",\"https:\/\/www.linkedin.com\/company\/customercomms\/\",\"https:\/\/www.youtube.com\/channel\/UCtvYLee1QHy89JS2-gMgnTQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/mailcommsgroup.com\/en\/#\/schema\/person\/0e11af8f964ebe83d2e307aefc7f323b\",\"name\":\"Soraya de Caso\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/14ae3dd733491c76bd64b942a99acd49b9f2d7ac7f1e74b516f7233443f05af6?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/14ae3dd733491c76bd64b942a99acd49b9f2d7ac7f1e74b516f7233443f05af6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/14ae3dd733491c76bd64b942a99acd49b9f2d7ac7f1e74b516f7233443f05af6?s=96&d=mm&r=g\",\"caption\":\"Soraya de Caso\"},\"url\":\"https:\/\/mailcommsgroup.com\/en\/blog\/author\/soraya\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR consent lifecycle","description":"According to the regulation, GDPR consent has a life cycle that includes collection, storage and withdrawal.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/","og_locale":"en_US","og_type":"article","og_title":"GDPR consent lifecycle","og_description":"According to the regulation, GDPR consent has a life cycle that includes collection, storage and withdrawal.","og_url":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/","og_site_name":"Mailcomms Group","article_published_time":"2025-04-07T08:01:55+00:00","article_modified_time":"2025-08-27T09:16:45+00:00","og_image":[{"width":892,"height":623,"url":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp","type":"image\/webp"}],"author":"Soraya de Caso","twitter_card":"summary_large_image","twitter_creator":"@CommsCustomer","twitter_site":"@CommsCustomer","twitter_misc":{"Written by":"Soraya de Caso","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#article","isPartOf":{"@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/"},"author":{"name":"Soraya de Caso","@id":"https:\/\/mailcommsgroup.com\/en\/#\/schema\/person\/0e11af8f964ebe83d2e307aefc7f323b"},"headline":"GDPR consent lifecycle: collection, custody and withdrawal (cancellation)","datePublished":"2025-04-07T08:01:55+00:00","dateModified":"2025-08-27T09:16:45+00:00","mainEntityOfPage":{"@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/"},"wordCount":1846,"publisher":{"@id":"https:\/\/mailcommsgroup.com\/en\/#organization"},"image":{"@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage"},"thumbnailUrl":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp","articleSection":["Communication solutions with legal value"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/","url":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/","name":"GDPR consent lifecycle","isPartOf":{"@id":"https:\/\/mailcommsgroup.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage"},"image":{"@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage"},"thumbnailUrl":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp","datePublished":"2025-04-07T08:01:55+00:00","dateModified":"2025-08-27T09:16:45+00:00","description":"According to the regulation, GDPR consent has a life cycle that includes collection, storage and withdrawal.","breadcrumb":{"@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#primaryimage","url":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp","contentUrl":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2025\/04\/consentimiento-rgpd-new.webp","width":892,"height":623,"caption":"Consentimiento rgpd"},{"@type":"BreadcrumbList","@id":"https:\/\/mailcommsgroup.com\/en\/blog\/life-cycle-of-consent-rgpd\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Mailcomms Group","item":"https:\/\/mailcommsgroup.com\/en\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/mailcommsgroup.com\/en\/blog\/"},{"@type":"ListItem","position":3,"name":"GDPR consent lifecycle: collection, custody and withdrawal (cancellation)"}]},{"@type":"WebSite","@id":"https:\/\/mailcommsgroup.com\/en\/#website","url":"https:\/\/mailcommsgroup.com\/en\/","name":"MailComms Group","description":"La transformaci\u00f3n digital a trav\u00e9s de la comunicaci\u00f3n omnicanal, con plena validez legal.","publisher":{"@id":"https:\/\/mailcommsgroup.com\/en\/#organization"},"alternateName":"MailComms Group","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mailcommsgroup.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mailcommsgroup.com\/en\/#organization","name":"MailComms Group - Soluciones de comunicaci\u00f3n omnicanal con validez legal.","alternateName":"MailComms Group","url":"https:\/\/mailcommsgroup.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mailcommsgroup.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2023\/05\/icon_mini_mailcommsgroup.png","contentUrl":"https:\/\/mailcommsgroup.com\/wp-content\/uploads\/2023\/05\/icon_mini_mailcommsgroup.png","width":512,"height":512,"caption":"MailComms Group - Soluciones de comunicaci\u00f3n omnicanal con validez legal."},"image":{"@id":"https:\/\/mailcommsgroup.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/CommsCustomer","https:\/\/www.linkedin.com\/company\/customercomms\/","https:\/\/www.youtube.com\/channel\/UCtvYLee1QHy89JS2-gMgnTQ"]},{"@type":"Person","@id":"https:\/\/mailcommsgroup.com\/en\/#\/schema\/person\/0e11af8f964ebe83d2e307aefc7f323b","name":"Soraya de Caso","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/14ae3dd733491c76bd64b942a99acd49b9f2d7ac7f1e74b516f7233443f05af6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/14ae3dd733491c76bd64b942a99acd49b9f2d7ac7f1e74b516f7233443f05af6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/14ae3dd733491c76bd64b942a99acd49b9f2d7ac7f1e74b516f7233443f05af6?s=96&d=mm&r=g","caption":"Soraya de Caso"},"url":"https:\/\/mailcommsgroup.com\/en\/blog\/author\/soraya\/"}]}},"_links":{"self":[{"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/posts\/33367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/comments?post=33367"}],"version-history":[{"count":11,"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/posts\/33367\/revisions"}],"predecessor-version":[{"id":37710,"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/posts\/33367\/revisions\/37710"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/media\/33910"}],"wp:attachment":[{"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/media?parent=33367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mailcommsgroup.com\/en\/wp-json\/wp\/v2\/categories?post=33367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}